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", @typed={0x8, 0x41, 0x0, 0x0, @pid=r3}, @generic="005694e569fe4255e6b35a06181ef36c398bfa2a472be92ba70922b7feb13643", @generic="7b8305d8a4d2bccd147f5c09ade64a7256e89c6fe63c6a539be6808ec0b0a02fba10128ea4f23d198c7543ad9d8a9403ecb9e7e68b8ebe410c00f4b47b36395ed69e8a439f1d53be770a47cfec6a6c33ce382c44380b66c7a70790f714ad2ca2f9d1180c506411d509a14dbbb9a75dc6fd9c9dfd65e99a9dd42664b44772925fbef2aa0f83fc36166d4d50612da1d922c45b1135898a24560ac4e8ec73d07836643c8a1e49695db2a89f3995f74e2c1ab3467e6ed61849d56c923f0c1e4248fb63b51bd6af33457fe67c0bb200e14b39cb9d4bf8a4699c90", @typed={0x8, 0x38, 0x0, 0x0, @u32=0x1aa}, @generic="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"]}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0xfffffffffffff983}, @generic="937a67ce2c7f5dd356053b5e7d9f1ee7cbde8ddd6cc51614e25c79d7e16d0b45aebfde6e70bff3e47f973a64a7bc9fabc4b86370435fbae7c113253d0acf", @generic="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", @generic="18c80bbe0eb9e40f9ce99d45eca6daeae5e5c6a5ca5d0fef0c2806d02d1587dfa7930af4358256560b451f3e67", @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1373, 0x64, 0x0, 0x1, [@typed={0x8a, 0x6b, 0x0, 0x0, @binary="9e66f3487570063f7d84d5d9593d489d71c721a79bd54dec1608d82f8dac118c636c58f689357b1931fc89bbf29345421c286e2c476f5fb16e12bb1f8f5ceb82d54741aa190d5de46be3f24946719899ecb63479dad5bb791f6c8f9bdf411673c450db0f10750da67ad67f2b9b9d5c8a7fee66c65ebb2cf73856a960ed78384dee5176591291"}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x81}, @typed={0x8, 0x87, 0x0, 0x0, @u32=0x861}, @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@mcast1}, @generic="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", @generic="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", @generic="73f6c772e146e6674b14ee793471b8e3f63bf1698a67dde0a8c2272228a291af423b787a258b708ac7819d785cd9915c12e09d8003c14a64c0ec842b4a2a9f08d9060b551112fc0e1c7e21f7d3689e5f65877c2f851825a65105da57b19d7246650b78274dd965ec6a8feb7e88ffbc799e9927edf0879ef34f144da7edf422502c5ca0d4c55b0e1a12baa925d55b82c23dfc", @generic="43c87cc0ccd9c556555bf22db6ce98e1f7ec73866e60223a102a68443000f4fb7f0d305763bd965c1b82fdd25a97c86b291f43be354079f2983578a2ddb0ce9621e1a78b876637b67cd6f98825b08f8723c4dd2a2187635e2add52769bf988ab5daddf16a3d34669e8b0c0fe135441c04d445ef9a5bd398b552ec75eb5835df921dd0330572f0ac6c4c24c7224157404dfa8f4f89e3353a033a8edb125579160e00f59a8e11d6bb854819f0018d97c436d47e80cfd5a9307fb9e7b58ddae419858f87c39e483b8", @generic="70731cbb5cbea01302680529089d6e6f5fad3d1857b6d51e5cfc067d99a0a5ebf29fa6e928aaf701435ab8be67fa72a6da1f2729d2ebb22e050cb3315723860587b97d285315d58ddf15c85b64966cf81a4b574a5bca37afde0de9fc3933842c8dcc39e8eb"]}, @nested={0x60, 0x91, 0x0, 0x1, [@generic="5d3755478c64c717a084c3e170910ff0a186d4155b804a2964281eac784568503ae97b739eb8f5293782f8a5992c55e003276b71237e4f31c79f7e2c", @typed={0x1d, 0x21, 0x0, 0x0, @str='system.posix_acl_default\x00'}]}]}, 0x5614}, {&(0x7f0000006000)={0x304, 0x26, 0x400, 0x70bd26, 0x25dfdbfe, "", [@nested={0x268, 0x46, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0x5}, @generic="1203b87b5425f22de2f8f14282122846ec76cd34ffa593ae209721dcb145eed42922b7f4089c6b418fe9f6cc4c540dd781abdd0b8d0d9166b8e9cf70b0198d71ac0fcaf1f035cdb0f93a430522c5a8c7447e93b7417ddfab1070ab12bde6e620738d9bbbff651f56288e9d4f9febdab7f5f6f1d515260ec4a32293277668e02e5c112f6b54c8b88a2ab50b448fe4eeeea220563d6d9ce39544f23418b3271090aa9740734a92da827d088c71d3", @generic="191968f349b844fe955f77d17333687831268c73436faca3fc6f9ecb74d698efb6ef0382c25cf881418a186529db5537f894337905b698f6d2015750f97541202a62db44e54fccf19b786a9f8cd45a54de464f6ef6db2fd9cbde5769436c3671af4e2cc9f74fad7f5b1113a3ea8eb02eebc21091a4fb7b1c270801b5d7b03466689d48fb85e35222cfa5208a117c1aea250b0c3b1799a719f43dc048ab904ad10b41215e71dba0932e812201cc894c70f4b75fb4324098922bc557282a5b94aa0f385e6247742c068303dff7c78786f36ee7cfe75d9fbfe8d5", @generic="7966a1ef51bb8ce305728ca7bcb23950785159daba332eca9b1cd15cc51b7ca78bcdadb8ed69bf282e76efc2fbbe8a66ecdc3c8cdcd5886ccd374a85717fb343cf052b40d921b988bb6044cc3b8f4f390da468fa007fec57035e587dcf44896216ece2acd602b30d8675f8513e4986a431febde589e0bdba977d1157d10212e1dd3e7928f55ee813372a17567e45e3156d213c1c399a108066c061bba62a346838f1a901da268df9e552219de67d09efe41b3c948f38df6dd930", @typed={0xc, 0x31, 0x0, 0x0, @u64=0xfffffffffffff0d1}]}, @generic="5dd5c4bd76846408838c20c4a513f4d039e7c2ec5f59c5efb8294da1086d1930becdc72c67feb2b5bcf079cf2b4cd45e089e4bf35df5ee0678d1a5cb3ed4", @generic="fe1bad7c19d22385e1ffb75b1520189d594deb6f477bc8e2cc712d398e71ed20458925bf8e4ecd1850990e2952c7943283ceaa9d93dbfbeda804a72aacb0338852088d0d5073eb6f8246d3de1e"]}, 0x304}, {&(0x7f0000006340)={0x104, 0x10, 0x922, 0x70bd2b, 0x9, "", [@generic="d4861546b6aa4e82d12c83e4ce13c61c1157ec0511f20c3c1dd3dd5e41a345bf905e438e28a1950ea093b07e48f49f3dcd0364263c66f66b7dc5bca622d96b56f9f7e2b839e22333", @nested={0xab, 0x15, 0x0, 0x1, [@generic="eeac018eb4c532e363949fc4ae33c422bcfbf753905bd5e116c12a0279b9a27f985c15c2b14a51d585621104e1a767bf8313ab870af69c08fab591ee76cf1fd8e48f1f7a1e58b9655207040083e561910d54b8021db0df0df3a7239a5895221cfd58a3ec6c33ba55501c3091d6b1d9ba031a52b5083d52c4d14837bf21914d9f8443deec9280dc1ba721bc974c3077d64c3e4a205876c542b9b7ec", @typed={0x4, 0x33}, @typed={0x8, 0x77, 0x0, 0x0, @u32}]}]}, 0x104}, {&(0x7f0000006480)={0x131c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x4, 0x3e}, @generic="251443cefef3db7e38d6355ce02e410c477c59f6ca156ffc98076296c3d489bc82f47527ed8a8ec908fc9fdcc5fde289f138e37c73c793ca1ae795f5370ed13b839be28744c1dfcd1f62c6ac43a2594cafccc854d7342bb27f5fa00e7cada94c96fe82603df272cba91378b69a79cf41185ce29f983740492c0771c5e1eac4850bea1fe97646caec5bddaa0fe1594f0dafaaf743cb9677137593286a9a9da0f05b0565a362fda6d818ac6d49142f9a2aba67d43e", @nested={0x243, 0x8a, 0x0, 0x1, [@generic="f242a7738d430d8470cb6eb3835724f17d3aab0af1ce953854bec9d9985a145b007837335076f4741a8e601b682e52870726d24c14440cabcdc6b27e161947ba88001f2952f97ee0a2daf90ab71bbb98f1bf75b53caf044e1dec072fb11338ca60270a90328053850c7388cf11a6905f53b6ca32491f274b8ac87e5a0b831ca1b72b71120561cd7f0dd15c2e794e003f420560b018d8c5021aff8e66d69e7c8f405f7ef1b6c5f3d9063bfc28af37015b3066c4d292377addd79a72967123d17332c4b6596243c2e5aaf15e3d00", @generic="3cf46ed957cecd03456a93f404d617a547ff3e8027658a44b2004e2abd1a0fb3becaf66a01a75cfd0efe5769e89d476a47e1324e32c53ebb5c76f5b0c9e089f7884892c3a41e19be5d2ace8806385f6244410cf342", @generic="85f3430db784ec95371c2059efe7c224ebf1db9e668987c94c4ae08a38c02c17e2ad31a98356", @typed={0x4, 0x1d}, @typed={0x1d, 0x53, 0x0, 0x0, @str='system.posix_acl_default\x00'}, @generic="36bba0c6931131ada6889f4fda0d85fac8a5c7c1952fc7b2016ac57171c5c722a326ab254a87b3af37e660cfa11996a4e29e63430e40f93c2e51affb5efb2ecf731d1bd6850b75eded4fcd556fca1086e5322b76821df0539b9a331aba9d98551f625cb5f0a58c4a247d2a57dbe1002f78832219dc80b64ea7773094af880ded41b4a3e0fa1f336933a6c42a522faef77653199213fcbd6936abbad4b3a87727aa00f92a0adf1973985eccb0803d60ba36d4cba8e0ff8e5cb000fbc4ce3e841d95b5e357a50fd78307b74417902091e4fe1289"]}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r7}, @generic="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", @typed={0x8, 0x46, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x131c}, {&(0x7f00000077c0)={0x10, 0x16, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, {&(0x7f0000007800)={0x18, 0x33, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x18, 0x0, 0x0, @fd}]}, 0x18}, {&(0x7f0000007840)={0x1294, 0x2b, 0x800, 0x70bd29, 0x25dfdbfe, "", [@nested={0xb, 0x71, 0x0, 0x1, [@generic="b6f9ce0b665501"]}, @generic="64d38b94bf92508506609df651f6e7ef0ff63ab20af53ec45c2765077dcb6f306be5595bf28bb31e9e09f65190ba0fd1dfe5615f619efbdebd18dbf1cc4051bb41a59e9f42dabc2cf6cb8d10a2b3810ed5f9eb06f3e3c16a0cc32098ac1777a3e991944ac4a919922157d066823e7d55b2e31ed9ba060ae3f1d7fb0943fdb90733619bce6fc42a2fa168b6abd148679bdf4b3377fc428f2f0c43cfaf520e04f29fb2b3cebff5b6ffa375da35c30d91909fdcd3f7dbc99e4d0e671f60b144589d96225f8dd69a4bdae33670544c2efb9672546c551d5b258c53a0d006e85f4f09f179e97ae894b5ca6370017604b1f542ad00fcf39b186d76571de2696ccda9048f5cc566a3687173f4d2f0600012038c0d4a9d5315780acea5fd5ab13fb925a65f94588fd9f52bda100c85ed1f56c1e5e37c8aef8d410adcf376f3071bc7a725608ee0f0a54e32a46412758458292aa1ea272cfbb849be2ce591101797e0e88ad544226a8f7a2cd9fafcfe44b25dfb839e2106b72c45a5d84307da0ce2ed321564f9f284800b635e6b055938b30dee18ae5d2bb8a816cd23d3692141cdc3aa048199e8acbe3df3b5aff622946049ce41a33fd7b6bcf368cfd5486c2775d6ef4d12095e554028fb47b0278b42bfae8cd8ef6e3631ce5cc4bc0e8dd3bb7cca9a8b671e73e658f37c2ad5d8d0fa653f397a62cd7eca46de3c1f51de6cd17f1ff81ad3575d00b8428bfb500b2bb9490e3671e6ad0bce12dd3640e66ec94209b9c7ed8bcefafa351d56ada42a425b57d2ce2d1e0987001e60a8e8c7df223496d88ed0c0707cb3c346697c781efef1fb6ea3155e6745dabeb1b488a56b051f2054f98f7476bbeb8d09cec48d8287610e7fd0f78010f72d60cd3e890060037b0f218d6668f77cf843df6344e139596ac7f2be12fbc65854237cea217647f6257805c930bd4cfc6e926442c3ee6079c4f54fd17ffd6d9fdb907fa80078cf8fcfabd8edb8d2388a9c5fd6858926a5aeef66f22ba23130e2195c4a0bec1fab31cf4078b5c03a8a3ca5f5f98c6525c539a403e3657ad69a967028e723896da48822096a32d92c159c3dbffcdee0952b1430de11b098f7a74f38c956909a62706cddfda2accd93453ae2685db7197656c21671054f3a41f72318555aaaaa4d74312bbaa7dbbfa707836f95d32b0c59c85526e68b1a3bd1bc6317cc30bdc1995b876abfa472337223cee9423025a95b96cb053124e107da12cad16398d874c1e734c71b33252f8cd99fd0228ca74f96854d22d2d00671e3f3e60a3a4dbc57bbd54075326e181fa0dcb6fea255204f33eccb4e4fa3a6b358ea47b5b750912754ff7811a4ddd9a7c41fd72f55bd58a2fc7613412da75b8bd9d8efb7e105aec99000b291dc9808909b24b56324c0a877f178e3e4dd2f90641e6543e5bbc21c5fcf46060767ade8e713be4754ad1c9dd27f9038e86cd8abd61804cc583127cbb32802538906ce5fc2a155fd8f61c49e40c2eeb22b8b8a7a9b3bca77093f2d19c6a74a113fe00b91b759b5de7c0bd18480821e6e976af4213d8d25d1c94dd2f37ceac699d545dfa6ee932ebd1c5a572c0dccc514d179f61658e07df2e0c678710b1724d8d5bef9116cd5d40cffefba457c9f04428b99e961433813d9be30cb746e2eb8bae4fb61a0c7e15fa7aa51a4ca3575bac63ce3d6847687e6b675b057ddc6ba380beca349321b2a13d5d5be86151eaadc61879075d459b7bb4c38fd9446580200f22263ba0dc38356d13296454a9002ea6b7a849bab0457f478d8e00ee11fbee89e5ceaa65f4eb01ad3d549fd860bc0490bfc56392de554b399d7d3551c15a10e5fe4c05a907e0ea3a12c2eb6b1f259d7f1ba7c327090f3846e59da6db1beecf3bef2a4414bb426786f6d02cb923e8be1ee142346856751ef2507642e5bf2240b4078019ccd4e53296391c62cb388a7fff678e6f6779d96e2668673eaf28f7d38a2127325c3aa9e1b605b3e7e92e862da3b4adb0e335364f9ed615a9a6493f0d02ffd3274a9084bbb826f915bd7ce3783dfa16f169c7184447773db0e656390fc2485e15509f69a55cff8a6d600385d853e3c1185500c2ef4e5396e96fbd706dea37cbab6a46132578c6fc4a4e3dcde5023c5f26a2cf1b76a600b80539c0665435f9de89cba4be00df31b2d005d140c8a37edff915ab738f8cf8b26db25db0a395aafd92fe1f2052ce2ef942cf8198cb5508c8b1be56957fe5a8331dc8042f20c68cd5384c30bb4a8e8931a83e4a336d0d89b2234a5691a695d2a301e2b628592e856c20b2e99269943d3230201da825df3ad50ad72e6521f8194b992dfdb8afb88fd4645b819f29372c84b112bb57e30632e9ceec1fe741524a0885845393273191c556cc58c094276f833de1ae7b25f679af153b2362e1d85d04184d7c294d1582580160430a04161d1cb071c3129a4ce9e7bf7adea738d36967117e1175d355bfd3523f225e13af4d4f4b4139adc48693d661bfadd740c16bc3a3913129599341e2693310d515e14b1b04a8811c02c7f42736c1341329683a3720bc7184d1776da3631ad84cb0ece8e123bf9cfb76cc0eb25ae8899ad5265df84da84fb1a7fd7b34799df69c02831f1c87c6d822c5d86ed68fe881a002d81c8a2fba2a28bd52cc34281835684ee3ea728b629ecab908f3e8ff0f0824cc07017284017a2e9e142b307e02c8189f34baf4b6a8439b37bb50430b7d5ab9e61ec4d35fcd017a83c230770e8a2e777e382266c1b97d11b20883c63dbd3177b2e4ada278fd03ef2f3d76937bea2056091ae4cfcf50c7fc18b4a3f1bf8b39a1307c7d4bcbe97996accb641c43ea14b05d4e8741404ff44f19980360b6977571fce9c4e6e5947036a0c469bb20f244599f67ba71812074b95743aa434c205b552c8d2efc015ae180ee5b260977d62ae97018f29797243249e8c548760873edb79b1473c250d1200ad5be87ba1c910bbf139c1298467b7634b3e44ca1e738a96d32034b1446482d2c58bfb6e89234a6828f348afc9ff10af2cc2c32b549c39bb4f537965824d9234250640696d70e2f6af2faf0543205aa457396ecdcfed4a837fe4767d8ccbac77451c490989f3c28a5487f406d0199f07e881d8453c1651bd51d50eb245977d1d6303764b479174f9b0bf016ddc2869529ce6a02717a9a4f524e12668dfdcd0977b4a899184d311a62d85cf13e6e77315cacefb5330853d16612a7470cd593e32b70bb5d5a3d1f5809a95c7d02c8940fa62d2a637ef644652621ec7bd2befd49b1cee99baba39f3a5f7b39a9ef7dc47d7bcdc832d584568d63bcd9701415b8aa15af9898aaa53ad20166d863cf038a8ee4817994e979ba784c707f6fc62987a4cfc805c6a5e4f81dbf5e8d2e4fccc7543fe44cd6fdb9d647cffab97bbba90185dc6a39dfa5d012105ca1de28ca07c1d4aa0e5f16517f6099048140f33e0c81c75242fedb667af560aacb0d63ff9f94ed9d4cb09b207110ec3b7d54f960273bc2bdc14451ac7c06cd6ab907c36696e8428adf241063c3813c1ba21d62aaef4ca5334de9aa808432a2ee8709172d263158412314fb9485a7fb0071ad3040fb6ff1c51edd66b3cd26db5f9e350e08b642a5952404718b077e871afe470ee5ffdc833ed3a3cddf69269a6e4116bc3b2386f9627672db4b26ed306acbf87565c8e76b2a4731e486cf9916dab2442ac05419f7c3ada3094f322aaccefb3bbf495383c12fa8eb34b5ebbe1407b43ae0e0e6ae410c03625912d6405d3a4c8d792faaae58428b0a564ec3e4cfb7d8ed5112efeb5b6e91b2bfd819bdd9ab612590799b37ccaa58961932f27b2faca0a3d949b972b68b368fa0b29f2462a2be1621aa37ccb1364d03a93d5517a36b6008419961222e9ed9f3f99b7007cbc2925f5ff84fba3a92eee5bae771f2ec2f06926194b0899228ca3ac699552c7aa135fed1d3d7fda5aa05c3ad8ad0be5d437fc21a31dafbde79e293312818e90be8a0796957808818e5cc98b8fa925719930b0514d16c950641a8e6253879a878e880b794aa083cfeae1b0f8b288c415018c7cd26e3dcfa340809fc74ecdaa0ff29820940f0643735787f0afd365e9a24462b683e87ed6329ee5a1c6a2afa40e445f4201dafee30501fe5af0e0ca2009fc873e66cf6e4282a260acdefdaa541588c9158f176db8a00faf73a5d6512ebcf3073c4e4a3f42a2c5e23ed7f82fd7ac7a01c106a02c16e427e80fd3585babce3b13fdc65ee719bfca58313f15303acd7ae24dbb3faaae70e98c8a999c9bd80546d90cb1967ca145438f205473a581b077d7009d06e1677dbd5279591319ec5d735ae99ee7178b58af25a90f41eabcce9caa87932317dada99fbe344fad3ee643b4f073e0004fc312f819dd0c7c7bde62bba06db0042e11c8543b4366a97b2c970fe197d4caeb507e21c306a400d08741c1c5f80e2243cebf42e560a03213b5f09d5e8011f74319cc697cf08604b4e5b5128d2a4e3e5460a20d9217fbc34194af256ca06b3136e7a2d682c0ea34e9e26b6bb0f95c25de5f426157ff44bf73bc2c1ac0bc295580d35dae9e00899f8fbfbaba6c331e3827b559d54958a36b4101727bdb0d0150a1126a45e0ea100bc607e7204eb90c009cc9de87bfe962b547c364b08b85fe93d5f655a04b7881a387973bc5833134b49f96cebccf0b3849b577c7a811494399e0dcf30264c8583055f178855bd044263e39fbd805f3ce59365f3849c2fa0293639c3c7393b7dfcfb4faa8e604407c2fba7a6601edc4c47e7f680d795e0202608db04a928ef1eccbd5e5cdccfec37bbcc8910a83f5608184bf2ddab193e029e91e124891e61698c92b1faea116c7e7a28f5bff990235eb286bce78b027a20baac36aa24ae3b740657bba7d2fdcf15a637e2585bdd60de976863a0b2328e7dd392002575c5ddcdc2f6072d5ae1401bc8d8cc64bdca99b46e839a405d612aabafbab51a3a3e1a3739dac2557669be8acef8101225fe4fee6c21c65d05b16abaff038b6efe955afb41806905ff6198cfcca2dd6e15cdaa8dd949f46c7af8a77d538debbf4e2aa4e9e35b47d17e3c88b5c14f8235b840f9a4e02ed39b2a851b1bec5b23adf8eebf756d1f60dfd5d2586e4ad8a7224f52d2d818d40095849a12da846341ea35807250f2c9976e57d732e7028e86995622810337b91ad2b7c66ed34e47253935514e98f3d4198f8732ac6219786c7b1f6d635c3c7bf6ec49f14f6c83765925409660eb26706de7a192dd7a629cc9bbedd8e5a60bb9202ca6ec7b1cc35c3fc5758b48a1eba0dc80bd11b370a1107df554ccd0e1eefd56100343e2608ff97592fc8dd3faffbcdeec6930050d91f5c4d5f45cbdd76c5224b4ab416f729d3c723d7b510df33d0b487d1915472d17e4f7b2847d89a6f37c432ab10b232e28d9d7b858f5d54385d544a0133d2a8a00cee28913e3b4da9df3726f8f2e0c9dc0d2762793c6e2fa6140ac469f1515db25b9f90b29f685ebc9ea55ace88e3141acaa3d012607daed119248bdedb7ad5e247dcf2db72634f6ec494511f06c6b6c850f5db7bfa2a8040996d0a22775cbb13631e6e2b9958e332b58c79e2bb6d3d598533b33b45bea5f578c26844d8df911682a1db9431de3a8d21df0447c82b203833ea072e4ddf7b2636a16fdfb922336e84c6ce704cb9460edde7d889afb14510183340714b6365d73a0f740216fc15c8985b96f2320ec8680bba469eee450c0bac7a0e8842fd0c42e28faf7b27b5616a98095cd1bdc30a55ba1acfab0", @nested={0x214, 0x65, 0x0, 0x1, [@generic="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", @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@loopback}, @generic="433949f20bade2ee52b6e57d883a2257eba800a50c80d2074c7ace098add7985068841d914f42b48c05717080e60ec34d6f25a64a5b7c73f38e7f9d662ac742a2ae543af5ea06031", @typed={0xc, 0x44, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0x29, 0x0, 0x0, @uid=r9}, @generic="2b1ee43c98b12cf3c8078eb1c7c21f16b50a45c8c61d28406ec064499e321e13838398bc14c4d448fdf26ddaf11f209d0863fab5865824dbd357f9a04c69a31f4ed1c4e281e6556ad40462602f2468c1cee6f103ca34c28517dd3797dfdd0c36e3de2a889672fdc3c1cee3b1f0779f7e82ba7f1ab5446466ffd20113f3ddc3558d0d6eb0eeb3a278b0d3268f399af0c6bfedda83984823ca105390d3bfbfd6425328aae8b1aebb3d3c5751389fd8b123e2"]}, @generic="c40861687cc86f48599968ac89b405dc5c84cdcf8deeaa2402a03a7d6cbce6e3986bd9bc470033c7ed5506f86e9f0c8834c5b2125a2e6e655e9ef8894a7c872188c84a4b1ad7a692691d982f16cdff5bfb2df5bec26346bd34b54ae697188a77435625f1"]}, 0x1294}], 0x9, &(0x7f0000008bc0), 0x0, 0x8080}, 0x4800) 16:10:15 executing program 0: setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) set_mempolicy(0x1, &(0x7f0000000000)=0x4000000000007f, 0x3) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x100000}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000540)=@isdn={0x22, 0x40, 0x1, 0x1, 0x3}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) modify_ldt$write(0x1, &(0x7f0000000400)={0x54b7, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2446.731572][ T4646] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2446.739542][ T4646] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.747508][ T4646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.755473][ T4646] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:15 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 32) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:15 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x50, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_io_uring_setup(0x40084, &(0x7f0000000540)={0x0, 0x78cd, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="92d7d1f0aedaba8471844bdd32553bd81b08cbbfbea8be791c6b14c89777c4620ef82969686ccaec0ee8ebfda6d1416728bb1f0b07da947e40e36dac8b2d1516a6ab02d7076ad37007ce929707c0a2bd0fa057bf2f4b67f86f72658c61329c32491df44e66f2afd2d7bf130fcc1e665ddd82fa8028d545b28db82d0aa90d1c997ced3eee14ba3c92b75cbbfa6d5a0e296431", 0x92, 0xe7765b5e0d0ae217, 0x1}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:15 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0xfeffffff00000000) 16:10:15 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[], 0x5c, 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x24008060) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="30d2860ba5fea0375ad8c60befe843354532b9ee3f2f51eb05eb878e859beb54d98ddeaf43e588a6e1a82df75f35df39482212a1d0a248ae20fc99da5583d6adc54d4a7a101a3cb4fad006396bcc43c602ff50d54010e8de6e454d80f395cde0690336a1ef806504510b270d246b4e1b4865cf710cb832bcb4486503ea1c36a9418b101349c5bab2dc88970adbfe8d2e4074155ab328283bf7ccf59d54487b0e34154c8946ad1db6282f3464f99b632c6facd090898a6b17eb9cae7b62c43f968acd3c7ac912b3517bf23591cc027e45280f61ab3cd464cc2a2bd36eeb35c34c0aa1c91fe4a73f26ad520edca44dd695e94ecb5dfad1e10e0f92b2440ecc1ee4b5e2b3398857d2c65ab8f888b34aec595a487d284f8e935b28f73f45486d73f5641b7bd097d3e5a7fab9d07d66e0f347c2ace7ef6481f51c38d801b49c9f50b160a16d85e52c1a44785d554bef850a751e4914b604bc352a471e23a228796f6335c44471848c9433d48fb12dde7f060798e233ad977a5ce7b16ddd5a7451926652dcafb6fa684fd515f8640b5a0cf6d104840a02e3500fe44b74af54b465808f7ad9968577fba384710dce400132eb35a23d938f80119af368c8fd7d15a707f448f82689d3720f2457a06379da3050cc3c1f3ebfe2c7e073896007b80f84dc60ad9c87695c717ad6c3edca96fe455bc1588972be37afd12498baf9690c7b61ee85052706f41b01e2e9126456fda0ed7490f8336373117e67befc1e84b68b498679d43c06e8b1a87d5f76de7aef4e83deafc3593836517178d0573ac108f57e606ffc6840f2faf7f222bf51e31a42c13f45505262f65d2a28a1efb0ee312e2d3a48a454bab5a4f390020d2a138b6bafb596efb383a0d678991e5c1e37c9c9d4df947692779320203d8fdf653d90548adb89647e7f58431770d1aed3ba8f31b9bc1f4ffe1a1c1f0509b551ad1b21f72c838ecaaed69560da11c9be8dc1d5ce125439d9df8210e616ecfe8fd522e864c3505917693342052fc36dbca34e9610da92584c3387859c79bcfb216be3b79cb21dd4c3f73b9285ac71a3b88a1ede7a5390d7a412b86b5466fa54cd1ff2056fa7d09a5596b0916033ec7e978dc61a3d367741cc72fd752763fa5af48dea8734d17195da8078db4c7ed2a932e4c9b0b39b8d7f79e33de076771fcbde33df0fdf8b68ae3b5a6311d4090685d50360b038277722f989dabac82385e09a7764391e878883c5cda34949001b8841527281fe6113d011bf4b57867d7352efda8417bc10978b7b65f6f8883c5915919301dce105eb7cf6e963ac73888fce27f9c24099a7d806330602d652494c28d9f4d695915b6248d33c33632993aea17bec6b40dbd6ab366c8776fc6ccdc759dbea4a737bca152c08ce649b91db44bcd1c8fe5a8ce2de16634f16d89581c431ab761f48372c2cf66b486f3636091d7e71f98b50c9aff6ce6a3492ca0648cec2524b34990d64f0c8c1df6923a0848a8de21168f76b0973967f8c55c4569bed5a61ad9d6f64957f0d1d44dce9552341bf73c8e30e0c74f317f1371aedb29a10d9c4483f5a70cd106ed6424f7f12b7f219e92b01009dacb76f565dfdec3930e281ff1f2eef82a4005cbfccb655f1c75f9266bc42c105dc10d62949f59cc9ff4eca8cb0e379951d8094f4bc58f1f07b5e186774ae439e204b3bce59e0c1d69b297f7e162bf06dd4ef7d5aeebba7cae34c5a52ed7f424446f151fb57dd09dcc3b20abfb2b63515bb6a21c9e41b961daa5ca7be197a9efe565479aa8827a8b302adf38f8b57301449012e157e6b35dd9f3616dfc7971775bbbbf7a541decf1148d2dc0c32cf5a631de8d0adec4478e0f2465e987433995c5dbd0832f4226f5264f1473130a778d1fd62bfca0711f23d12970ec644643a21826a420558d66196c7c6f94a91a75d629c4b9829aaa26f53acefddf9b64eaf024167660487d3afb2ff368aa7b0463e3614ee84e253d3254f338ad60feaa662c1f339dbdd38a702d3c37092762f6cf55d925b8aba672a6b13e8ca2dfe6bbfc205feccbbee57cd2dfaf600331cc724e76b164345c5a914a8e55c7cc3f7e34f4a78f558b54bfe3705a7e66b8eacc56e7da35817021046ae64875015a1e443c97346ac47e687bfdda3d376c0ed3bbff55ba4e9d24a630e349a3042d0d4ed52cbf1d7ed4f35341754be7f2ac7100bb65c2872d7038e33d9a50863bfe94dc97773ab300e54555824e9b146a84b2249e3e8af637189c6d69790b34b9721c3102f8b345bb014c50fe0e0a67302444284e58d9c664e78d58b748f0d6bb34638f3d5e2700c596ab5ccbc75a9b7226f41292e4f5b13f30a28466eaa74343d8c199c0fa8b148a9ab6e10381729c03d8eec84ad590bf840015720ba22fd261483e35b593e796950aa4dc1d454dc0623c28e753dc6308f156ca2fd3ed6e0e4ed10ea5f1ec7c194228699a2c3954dd9c7de7ce225d3d2ee79521882015329cc0778d14aef877359b42f414c06e37763d51aa252c8bd5f90c6403ba2e0b0cd1f318f2762ea03947cf025a1a343cf0b365ac14fea184339c5c76aa924f0bf1fa1cb8419fd8af8a16f6329fee611e382cb16caa9007fad88679b301d3973bb065ba250093bc382e605b7ea344efd3f43b5f88bb04e675f9f7d5cde29437a16be45aa19240a1cfd025722461e176943a0553d90526bc330458ef52918a21134569bfe8007b65dc7acb8d1fb3c1c68defdd82585bd4a448879aeaa697676212a553c574b5431e8e87b8d628306aff61cb8c4ed0ecd7502b7a015b5e8d3f86444a889f501bb45c4edc971f67c7129d1ee88df1b78b79ba55cfed682a669ec75e8e581649eee66898894c528553050290326ed3d99ee01b7e4e406b53ee9a87771f65f2e02180e118ac35d5c822f93700dabc42065abee86d16eaabf35eb4bb7ecb568b21db9323a62bc2f1e7cb5a85bf667050c5931df6c089cf98666394595756ad2e0b8afedc9f3f335af81b7dd16178e7d1b908bc8311f26d0d8024d438398708685cd78031a58378dcd921341983896e80dba24da67456fda5ab07af7bc71a7603e8b59c9de6e6154e24a823c8cc27afee720c9eb9e0c2b1d4297d2d4ad1b2995f9e895edd578e32ac36f795756c89e58809ad03abe854fca05370e7a3f03876c0a2501a35872c3f9806bb58f6d0dfccaf8362be9951f00bc7b1fc2dfd44522c66c3414c74356a4a882f1b7a1049ea9220f50239cbf9480d5c68075ea73272a3b7121f5483f304e34b00300befd53771a21bd7856d44219d9c9ff806e6950f298d40ac4cab54866913058d8aee105c57c462f00de050c51358236ffb7fb85c26e7ddea42066e0625128c7b23f280dd940ec820a77ab2883b976ea24978ee436c00c42f376cbc59b16f57aa591138ecfca48d4b89147541efef877b60400b7da626d27b8afd208b4d30359978bda3e3cbd2ae88bd97667d6fc840084f6f7921e1d4ff05b8d6d8512e30877e6cf13f0d12120aa37fc4d75f64008ecb2f36e140e4871a5a4ec37c1dc7110244e78bedf59c5fc5c90c5d49e00b823980dc7c4c4a9fa4b00ec88b041d7d1b8b83b2abed11e484b2a7e5850bc054f12f867d9cb59da006e64810b843b21e258cd2f6b062beb17493f97f700e046031d84fc6402a5dd6d1cdd023c439eb410553a28515cf2300d108ca56926b41ee9379a454d97c786291b359589669ad27a8ab28729bb227200086ce05b054be61890127029b11f6d084305911c016e85e03ba67e94a439a85626b83179473a705b4ce0c55d7dc8f682e70107f2f403843c7bad1f12fa67bce6bc9e0624b86f023b393d9e2c0144101d76dad555cc6a9d857d3bdd9b0d86103aaedbb98cac9455eae556ba6968847757ee99ae52558402c3d21c2d4b2c04fd1c0396800b31a79c36228a1b0bea663f985056266f3335f2e303a5d5998a3fc3901a15ec8b94dc5f19698a8de946e7661831e11754d134e6c8bf8b4fbda16ab25b9b3e9e4090d405271a67486f6f8d97f53c4be2ef69c3d9c66ed3146a72fe70d6a447c6985b445b302f181afc977fb89c422554e9c0cb5da1daef3b49ec40e9967a3ed1551ee66f99faff9dfa50e55de421fdb5208b537f971c90d06d7d293a8fc5bc5c665e1b474fdfbb14e7e597d17c61eb83e7c2aecba1b4248fa66243453db1e8df0cff463807727a651a97bdd63ac560bf6d051bc02b03ec7dc739db85fda08052807d50231370a2d36b7f43461d7ca151855248ab4b658be7cef7374ebf2ca62af5a77483fa3a88202d0207666a43bc465314e67b9f8fb916f64a26246a80dc2f9dd60a3176e3889ccc2ca85d128076a25911a6bf67914f5aa1da180987c369de65c9c774efb4727fbdd2b0b224013f2bd6026d45154b69e0064ec9529452cd10b78d6a7cfd5f7c9ad82e1bf9bbd791d077d9331613e96a42d8ceb6c804c6c17ea4a5c61b6f9941c807a3c74158fafc4a569040c9c8662a6ba3253bfca623b8f5b500d1579d1c18f5d2135a97576cc8f8a004132b9d89080d71d915a5e2090755a99be197033bf972276ee86c6073467246a6d1c1c3bafaa4203c0abddfa6a5bcc4b8ec34503d73162fe7a6e3c803319d54ee03315fb9ee3778a4279a6cd6ae1b99bfc2a3f72c2ae86497eeb936c033991ff82cb0fea85a9a1a95bfee23094ae1ffc21622b5dd2ee6173b5b449a455531fc07748fafb2c023a9533de20bed3a034fed6791a5bd4bb8c2255170f72071bc33e9cb8b470be2bdacc2cfccb6ba814b5c7e9ea368a06774ca6d8e61a3ea783c44ec7f4e80a234162418f1ac14d0c31c6453394d7f9d765489c035cef9e5de154fd88c8edafbe8ff6a715523dc96993cdb2a9667e430ae99db31bd3139f106a85f78d998c671308367d183313b9f336054e55f435ab5a404a4f192b1e7085df01575f98271f276435f68577fe79f459c902c166abbc357f4f40599eedfdc5bc64818388350e00de194582236a8846097fc6f3652101bced51c0f76a4fc585995dd478a63581cbbd14ba7dc2c6a1ea0409865313323790d7432d76bf9b383c8b7e61a824225a25af61ff2c059e41b97d6ae4d2b87ff51852ca3ed995a5fad3ec0569898b2f630a51ab0fa73109c9e4b6663a76cc6c6d02c10c0b3293a0f7301d46043fa3e3321b65dbff191f9e2801a15134e1ef631083e0142cd75042d8a731d2e0b13a0decff7172ea2c9bc9163c343de174d7c434c7ba6d11a2479241cc1703f4870abb34d10b5e8a48451830702bd35c9f5d6f7420c09b183cb3e08cc6faa3a88fb732cc5f87cd35ab99678a8860296db90691bb3ba7de626a9b07ae3e99b2cd0f6ded0e62ffa1a3002401197d110c6196fd69f69d6e0f4efef79a2717d009c0f9bd3dc182840af31b459ae03ad0330bede8d9e518ee23f34143d9fb190e6e76926f5ed1d1d2db13c954a9f593f8c6fd24ed37f98b889dec6d6885d16b8ebc5b27e8a41ed89fed0cb8806300dc8d77f183b90de21190ab19fb4a9d1d0386a5e8f586b6e206b46a57fa14c435a5400977765af1b6208ce981a352b3e37b1171c87decda8f22ce8547fb081f1678ec30a959db85e2a87ba3c7f12c1dd031ff72daaa3958826092768a0e6db34a6681eefddecd84c1bc2db227706283cfb4347aab51775792c583121a330df0fcbe9d4fe73d57a10a219823d0829b37b57bed6da236a6a6404b224ef3c4a8646141fc4c6c238da0f7f800a2cd7613c3217403189a0b23547d0ec3eb278202b18d5d2d2e6fc52f588801d", @ANYRESOCT, @ANYRES32=0xee00, @ANYRES16=r1], 0x11c}}, 0x24000080) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000002680)=@getpolicy={0x1160, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {{@in=@loopback, @in6=@private0, 0x4e22, 0x0, 0x4e22, 0x2, 0x2, 0x20, 0xb0, 0xff, 0x0, 0xee01}, 0x6e6bb7}, [@algo_aead={0xffffff76, 0x12, {{'gcm(aes)\x00'}, 0x8000, 0x40, "4ce8673ab10a50aef9e3f623cd196a29ce016de618c3183ea2360e65a2fe75fc16a293296ea8d3d7057efb05acda8d743b56730c7443c3b99b5c5f72f4fa6caa150608b60acc1f93e8aba34dfb42ea06e937693a998add3a3663c7a3c44189bc554cf599bdb3f8a0c5006b86f7e67af4145e0424c59989b3a5b99ac95922ba9edf61cbbc9ef4516c758e48ed6718e276cdcc0a7b6fbd00ef8c6ea6a19a4117b8f8832abcca6e31e09325798235e3034a00fadc9e171716ba6a4259fc29a2dd51933ef0ee444c4e94bd69a796be4f2032bfc1f94921bb800f748a6aba9d398b01084779c8d2b922455f815be294b1939a1029142e84c59518210fcd7d7054dd77527cdbf339f7920549bdcef0737b360fddd7693d8f39f0a7db10821ae9c3f465e722c97b95f1fcce72d36cd69b349254220894b6ad4d9a6f8712f9b671dc25af933af1a61032f21a80b4a33178dcdcb0311c8ebd909aca8fa4a26c7d721cd29550a4f2f91b7d7cb54a2b768ce10e211a664e8b7bdd1aa0304cd571f540a6114fe46d92d43169d8c8b0d2378f54e00886eaed7024385d5b0bc32f692aa2c306c8a280bf74c0af5b7e9c07ea7b9be4ca09002e3506de01aa9b10f4df56c868f498206cdd89cee97c77106836a160bc2d074f43f177577314cce09d29659f634d308c366555e078540fa5f18ddb8f872045c40efb8eaaaa65c8b9ea4365aa6171472a99b05b2af292ba5352ad1fa21b33009307108d7b7ec6714a8274b691f8513c13cf5af2d7ada6a722b02a83de2dfe17cd2256c49e60bcb90998a178c94a902c2c06e71260243da2f51860969566f3bcb98bd32287860bf3bd5dab27daa34a299999573fc7e049c4729bc63a96dc45a196be8b0bbd34bb1eeb5991188a570b38bdf978f923b0f1a5ae47db1dd0ce1a4da5587a0717f42274240f452b89c18b1d8df3a37bf058f044b7667c656c8dcaefff0cbb59ff9dea91e163abaebd24a12056f5c7f3bad7a26f9b7b7ad73c435d09f72590a322589c2231ab328fc41a5b0d681a008f6ca8df8a5a298b907d81da1afc97b2d413e068e07d4b92271da73f18c9eecbc5fcdc8bf9ee336d7849adab72420737c87340adfdfcac4ed7c17f6dc73e83f555d9ca1283dbf2193205b22b10fe0c197cae58bd1b318c6ac8bd692f075f46ea297ec1a61b3a657b35295de4a05640356bd7f63d5eb2c396d1ea72de4639957f0d191a8c54b08b4d1fa310b3280102d7e679b88724d4f5b5affd8b422cc4603a20fcb9032ef2582f2c4d1dab2e4052b02547be2079b7a8fe4dfaf57eae8796fe8a3a0a0ea328c841bd076671bc3a1bb03316bbe794e623e3ef813f231a93f206d6d67b5334bd58ef8cbddf3f086ee171a40d5a07ee450d71bb7e4e9341778af9c10cfa214cf5693a8670cca146fad93f38edc7b4a2b9c3542d5383497d9bbc0b73846f5e04e868c72e0ce7b04046fff5a9c7a6779bedce8936e13e45ccde1f9006b1efb8bd65324daf93ee86bc0a30fb4cc8ee96f3210457b89552e2b7476462f9f50267620cbe68fa4fddaff3165ad494d4e48a5f057eca25979ba40f39069c605e6ab090b160e338ed1e73714d4923fb8be08bd6d62441df17f44dc6f75bf4ae941f5fa9d4ff7993ddfca30f4e1b25d981b9720cc693d0f977dd49d8342764104a84611691183e93b3eeb1373a5bb9861045fdcc00d4ef1b6052900a56915b77145f7f5a30ac5e7accc6e1bad91efec30a919a3f8e4e707ae3c817fd01e7db9555ffffb636202b4189989c399af19111b62f6f465c3a94c447fbea2e399e542f91dd0b6b093628c1bb1d73498956150b116e00406893178553ae0807360df2b0816916131768a5c6793e473df16fc3b25f4d12ea6897c212caeffbefd70ac067f5a878f11cac94d53a706dde4efa3875da5ee3e5ae9fe586a18ff578e2e11fd1705fdd789273f614d2420de71671cf0fa10b67ac3d0037a4b75be5b2f4429efdc59d6467c9f057479242054cd210d8a306513a90363fc736fd0c0302563844a39b27d4ad7141c9fa565c7ea0196a933c0787e313da27e929069235ebcdb968d3a09c99ad584ef3932c147b910c2d78d4309b83544fe55c5b050ef3a51a143ffa7c0ec08c98be7bbe978ff7584fb20c22537578b75e346d2636074723d0987bcb1bc5d2980e9df79c2ab9b82549e9d26beb7872f28fed25aa00df38073c902dec8765a3be985820d46593b676e8a7b2000a89585b20882323140c80bec7eb31d0ad809a0753a31e32de6b35f6c81743ad2faa4b32b571dae75884ed089a5a6ebce43962cb4d75cdf26e52d03b77d88be777e8fbcb461ca9d852180fec07a77780ff5ac9ccdf8bafcb933e18efe2ef8f67eb5c90856b21a8ed9974fa4db0340acea66eb3474f9f3a1713ac00195c2acd19882586da2b3c666095fb6bb8a7b5caf1a6b7189574bd5fd74779038235f0b5f3b32c7370d29a2e0b8879da73ed01dc0df48f455853c8793958a91d41c040edc0b4ef1a862068b7f29ce1682b7fb4c357a7b48b0acf9dc82114e83f817f891e8c101891d26cfeb958eebac40fb7a560e6ca6ad2a29fed67f170e19912263a54377d21a5310d09d2049d7c90b85ec33c08ff0a3f8e7c4bc9adbcb0451bb058fce7ff1cc6f642e867662ec9996e941d47d48b3a155468dd329605cccd775eb0657f2ae579cb5f64fb21a07659064969880c508dfb1333ece222179a55015bca59d6ce11443164a19d7aba8f2eeffaa257840f644dad31fff6e35d06534947e8aae42c895361e63426dca70824e2fb7cfc3e79669e194d225138a3a2e2822976c56cfd0d645595ab6117322c2cf7c5d3ed7b9117933d6029e1c04e8dc5ad84c5a5e25e2f207c981bfe76465bab737a05e488e8889c8cc8ea630e4f1a81819613f0cadf8bc86531b9c7cfb34ad30d3be75dbf29aac6ea216091e56c6a4cd13c307a91824ebe2288fb496dff6387b4266635d0463dae3def89c76a9494d4df6a6ae6907d78c29ec3ea7200b403d415b42b2418acd1b5d4933984911fe6eee3576688324cfe2da5418d8832753ed30a088b9cece5cda412237f3960b456ed41aefb6a9395a8e91c9b5610f62f98591cec8c9a0756681998d583d47be5ef85f7073e50862e5a96031e0ce74f674b0eeea4b6a58f1d8f55a0d7b426942e78439bbb866373267531e435f6fba450b28fe929a1f6c4c6c6da43e04576f5564a1c0ee7543bd9d7219dff5e09177a3449db75e28e944b5012766f1cd23311224675089e481e6cae6e62c7c92e4af809bbd3283760049682f7213c2291900e49b7cc08fef0db11ec9c1b99844f6c195e46dd39d2183d6e20c7a611ea0135a1161da547f41326e9c061c4cfa6a77c634bfcc054942dc28d440982913c8c0c86e9f485539fd3b735303ea422d34c91734ce3f5a688b84c539c1fa0cc93a97ff8140f50fa445cc31a0e8affb21bf584d6dd440e4b05eb03699dd53766686504cca775b30975e97399241d5e5b803ce902457e5d19144e12dbc144affee150a2ed1b35c36d9e0935d075975ab505d3d5c60b887e8d054393b401228864d11819123ea6b3eab48378c4d60bf83fe57dbf3184843a17b13ed94a3d25cfcefe55ec74818892235e8d72c0d5a4745da442aedb1a472971849a8697d24c88afea1a67ed9beb3dfd9efdcc02a4e64db6e784a9c23b75af92dcec6b6c2980da7cc36510baa724f461ff78fb9b9e40443f2de9787bfdc291204cd99c0e715ced8cb909b5cb7ecc7e566784f8a1190c6fb44b035bbfd1bd01c03bfd92e0e0f728c5826532fedd98b532d60349cea15a4129c7dc177f5c9bc376607a2d0a57bdc8ee3be25f186bb12479b6eb7b81e25f74fb50da66b8d07b8b67359901206bd9f2f19505ce09e93361b5809d805fd9eeeaf18c6983172bef3fcbf93af61b9e19a97e353e33891df8ca2d886fd6295deb3e24bbe10e48ab98c2a0764f8bcf2cefa3cdc2b9f9a420097b415501c407a5d428eddae6a453c08f7636d9041c90502b454b11cbd6dd535ee3e4f7e80ead0d0431bea6e5beb8a02ad5679f95c293c87f2a2efc5e79ff0d578396e618c5438ec67f3986dadf44038399d6ef93c44cad15b0601160fb9bc273ca30686b454b7dd424b7bb0302be8651f5b6b66c1b7a993a489246dc12a4779dc6ffb1160e7f7dfb90ad15ef7f9045bad2884b13716a96486c2c2bfd7e2d9d01e3b88a8763ed6b1c8c6e95b746ab152b06b9a77879bf8b65f1b0875c614fad56ce2b3aedcf325f0ffbc53e27781aecdfdaea6dccf01d7f7aba7d9a0c6197267be98428bd5405a59dcbc474b91510ce2b44cf188cd974fe9451a689bfaeb5be5fa23889eae8afec8b4b2409abbc3f237e23908f67dc864c54d2093d7dd3c08883fd14400fd49227aae04a1ee692e265d2ebe8288b9c10d0956802d6bff8fd5e53148aeb175a989ec1be0facbc8ffd83476e34d5bf6303685d957e8e724f60cd96a6f863625499f0217254a2c03c15e2ebe44fcbef03189706830fd122f19daac34f94b4836fc061e6f13017f09f4d192630a3eb1d8337ff5778541225a926b5391bd10046af10abda879a15a4787bf02e2230912796d54a59a845784a82c47794816e3e9f1a92cbfb1a3db4e31c320cae170a28cdcdaf2988d57e2a702555b3a111b0edb79a9278c0a3825ab18bbe33eaf24afe56c7acc26d8c07a7d4d280c2f3a5fbba930ebcd47290a281ef787f3149c7d7d28a0b5388de7ce029d7b4a6738533a32d10c7b67436455f72c194feafc84ff74f372a73abd02915895270afdb30ff7458feb4fafb0fb924e4e508a49521f48bd976e68788428e81c9a661af07ff88c4359ac708d7904a706433c60ff044cd7ffc80f2a4c4356d831f799e8f73c6d0dc37d99c101cc9c429f48fda92c8802bee297616383f8b15ee8e90efaca59dbd16bbb16011fd7e91fe2ef26aada94e100b65c4925c255b3a99fb103f3befba5e8a9bd77213a96f1063497a0908166d4b38db591ab3cd148d6119c68894d0d2aec820364c4babba35ea6da9016b1086295cc45f2131dae4edcf7fd9df28bf16a27dd1624333c94fdc22beee7fe7abc9ac4c7433529921c62317ffe23f26d5ff7402c4a1bd6a6383a4bb08a2f2a1854d70a16f1e2d46302fb3e06bd459bb7a994c78b5a43dd01177959dce9e633fdb1fff17003273b38e4db543e4929ac60338597d76c225d212d467982d85e5842e2b8f182b1220135daa9a88ed38f44f92ee590d8ed1121a4fa4808c69b15b04615faef867d4e96da585cc9be9ed8d39e6dd0a1705840fb4f9fe9ac1aa1d8e73f314d193d61eb4c96f92fc20717d5237445047746dba5e837e97b0dd5a37262227d30929799fef0a1a2d7ee1863b18b3cc6601ffbb4a1a7b9abe44a551b814a1ba00759ae6a46e4ba3230e481016d0b6a42b572aa3736fcc0b627f0373f855cf56e24634a467388e8c7194556d41b2f77c2d38eaeb8ec61e953b03d7fb1c144bd5ec0a9ccf9250e6f33801cf2b2df7a64396fd5d580ab0a507d4b10e91f6928ca56ce34bce7d50ff3e9e7f3d71a01f2532801bbaaa0fee47251ef037335d11cb0fca102b088116aeb18fb49070e22b580a61cebd29f2c89549a2090c4a8136a418e2e6a845b844beeb78ba09deda61363460d307f71bcee57c5fa9b080f191235ada69e38deb0c97f7887f64670bcd96727cd8072d9d268c5ab9036153388c437b11cf44f4605e23b8ec1bcf56f8c69ae8f7af410316af0bd4df57727161cde134f8542b"}}, @algo_aead={0xc4, 0x12, {{'aegis256-aesni\x00'}, 0x3c0, 0x80, "16314b46b56bca34223c3a7ac47a05b536bdee36d0952846fc7a14b233448ab56ce20b177be1fd9cd5ddd07649c964c765134405429333239c1c9e83b0e41e83b52ad31cdefba129236e792d98082c6df3c1bd7a3b8b8af4a431e7711f52a348e9b4ad12b0194e1ac03d2bf088caefdfcc8feefda90f0d49"}}, @address_filter={0x0, 0x1a, {@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0xfd, 0x81}}, @tmpl={0x0, 0x5, [{{@in=@broadcast, 0x4d3, 0x2b}, 0x2, @in=@loopback, 0x3503, 0x3, 0x1, 0xf6, 0xfff, 0x6, 0x81}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in6=@remote, 0x3504, 0x3, 0x1, 0x15, 0x1f, 0x0, 0x20}, {{@in=@broadcast, 0x4d2, 0x6c}, 0x5, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3500, 0x4, 0x2, 0x44, 0x7ff, 0x2, 0x1f}, {{@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d5, 0x2b}, 0xa, @in=@local, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1000, 0x3}]}]}, 0x1160}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 16:10:15 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x1e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2446.978666][ T4689] FAULT_INJECTION: forcing a failure. [ 2446.978666][ T4689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2446.991942][ T4689] CPU: 1 PID: 4689 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2446.993604][ T4691] netlink: 4368 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2447.002006][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.002018][ T4689] Call Trace: [ 2447.002025][ T4689] dump_stack_lvl+0xd6/0x122 [ 2447.002050][ T4689] dump_stack+0x11/0x1b [ 2447.033490][ T4689] should_fail+0x23c/0x250 [ 2447.037903][ T4689] __alloc_pages+0x102/0x320 [ 2447.039292][ T4698] netlink: 4368 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2447.042491][ T4689] alloc_pages+0x382/0x3d0 [ 2447.042517][ T4689] __page_cache_alloc+0x4d/0xf0 [ 2447.061203][ T4689] page_cache_ra_unbounded+0x1be/0x430 [ 2447.066707][ T4689] ondemand_readahead+0x58c/0x7c0 [ 2447.071740][ T4689] page_cache_async_ra+0x17e/0x1a0 [ 2447.076880][ T4689] do_async_mmap_readahead+0x211/0x250 [ 2447.082338][ T4689] filemap_fault+0x106/0x9f0 [ 2447.086947][ T4689] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2447.093298][ T4689] ? cgroup_rstat_updated+0x34/0x100 [ 2447.098584][ T4689] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2447.104131][ T4689] handle_mm_fault+0xc81/0x1580 [ 2447.108984][ T4689] do_user_addr_fault+0x609/0xbe0 [ 2447.114008][ T4689] exc_page_fault+0x91/0x220 [ 2447.118596][ T4689] asm_exc_page_fault+0x1e/0x30 [ 2447.123460][ T4689] RIP: 0010:clear_user+0x60/0xa0 [ 2447.128481][ T4689] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2447.148084][ T4689] RSP: 0018:ffffc900034b7bb8 EFLAGS: 00010202 [ 2447.154142][ T4689] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2447.162110][ T4689] RDX: ffffc9000f42d000 RSI: 00000000000017e0 RDI: 0000000020018000 [ 2447.170074][ T4689] RBP: ffffc900034b7e58 R08: ffffffff819810e6 R09: 0001c900034b7e57 [ 2447.178074][ T4689] R10: 0000000000000004 R11: ffff888109b96040 R12: 0000000020018380 [ 2447.186113][ T4689] R13: 0000000000001000 R14: 0000000020017380 R15: 00007ffffffff000 [ 2447.194080][ T4689] ? clear_user+0x36/0xa0 [ 2447.198451][ T4689] ? clear_user+0x48/0xa0 [ 2447.202813][ T4689] iov_iter_zero+0x11b/0xb20 [ 2447.207472][ T4689] ? __schedule+0x435/0x680 [ 2447.211988][ T4689] ? should_fail+0xd6/0x250 [ 2447.216487][ T4689] read_iter_zero+0x63/0x180 [ 2447.221078][ T4689] do_iter_readv_writev+0x2fb/0x380 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) 16:10:16 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0xffffffff00000000) 16:10:16 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa0000, 0x85) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) [ 2447.226283][ T4689] do_iter_read+0x192/0x5d0 [ 2447.230829][ T4689] ? import_iovec+0x69/0x80 [ 2447.235327][ T4689] do_readv+0x171/0x2c0 [ 2447.239578][ T4689] ? vfs_write+0x61a/0x900 [ 2447.244001][ T4689] __x64_sys_readv+0x41/0x50 [ 2447.248588][ T4689] do_syscall_64+0x44/0xa0 [ 2447.253002][ T4689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2447.258979][ T4689] RIP: 0033:0x7f4fc1ace709 [ 2447.263388][ T4689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.283002][ T4689] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2447.291469][ T4689] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2447.299442][ T4689] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2447.307412][ T4689] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.315379][ T4689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x840000c1}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0xb05, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0xa784, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2c2c, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "ec5862c59b81b3bb5f032a7bce06fda54e182f7a29c7"}]}, {0x3b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffe00}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x27, 0x1, "db0a8ae2a4ff1d3d2091d4895e59190abd806bc70c519e81bcf1dd1147d65c73aa046c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "5e977dac160c0b59b2a11c2e88b4f32ac22514fdfec219a0948a9d9e85f419f5cfb686b695a7da5fb6c36c8b18a4ec37066d0f90015153c2f63ebc1179a26dcf986c74d2b3a12534d955121e43347c20b53951a859112b330d93b3b08b07774d2877149ff91a45b00125fed82a695f239500244a93101b3edbfe884f0e577c2b89a35ade860eed056549cd48da81bdc2e3eabb193176f5ad131a2b4be24c264902ccb5473e1c5eb04a16d46600de3dd194da37ca1bc7b48618e2e001b967c05ff1cbcd6a9785f5"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "e45f0960cceac818e73fce748cecde1e5dc48559e42abe3c9b918c671df606b19357f594693b6ea9ed3809eed4939e9bd67cfb657ad6757450e5e236b67cdd9aaf150bdecca8ab20b37784886207b345af9e37a0bca1f816d59759bdd7eb17a0ddf983dc9881a6b53b8d9c6e2006f352f4f0b14201cad3f16f8d00f85be0e132b4e15ddb54e52e2992a67263c38b4505a54a4bf75e75f7967fb1331c7bbb00e2f850f5caee5055000d4ec4baf7144d8f4a064139702ad966d2e427be9fabaceb8121b6ba969fdaf8465362aadc6f1b479c86"}, @NFTA_DATA_VALUE={0xc7, 0x1, "4aa04155f3a464f0d395313048d0bea9d00da3e23e783822fc19e51388ed94fd94a9d692aef398c2f87df2f24d019e30689aca0c80e283c3793c46322bf4a29e7c9f3af2509776c0c25de1c37975ff479af4aa97249d62cebde5f576515b1980f1c3947d98d9ff222dc0ccc3ae58ceb103e6c889bf929905dc6d23c0711b485931002eb05f6d4051db1d6d563683ff909381ae65c8309eb9bd0b8238cfc243cbca398c5e88c09a7ef09375a55cf79a8a772522a7d2ba97a49e3ff902c78ceb9c3923a7"}]}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "932a470e058e52b6a8d5e62a21e042fb9249b1be5251"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "28274f42f90aaebe1b70b2ed0ab4a965e93f19d8ec8b524d48fb3139d1ef"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "06fa66a37bf5adf38be66d6be636bfe7277e491f447b4fa3d1191398928547a4b42f6a97a9e7b4517c7ad505ceef2d9ae4608755d843e0833e29746a5dee89010b657d64e5ceefaa39342f980075bb9c3d8b9e1661765181f5bf9a2120e8cb5ccfe23111b29feb743e6b3004d42860f2275b70fbebf8f07cd26bea6f5a5cd923af5546baaa1ec5aa73ac9f13bdab0acb6aca3122fa57808e5d44e3fb630f3cc05a50714f78f22babedc4401cee24c8dcd97d16d0f33d931385afc1de7b6a3822e5"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x146c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x1e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "dcd62c837dbc6fa1e6790f7fdc619d2033a6580448ca90e2226f920e34696f6b84cedfbaaa17fae44dd8b0ced3f3c55212fe4efbf824f0c7803c598eccb70d69be9d9f170629f0478dbf5cf49851c13af2498831c7aea7484a836fd138e31c6cbdb431b4dd6a8fe1f2ccde9f426e0a770cbba64e8f508e038dedd865a9c9d86d5e140d7cd2b1c2edefb98f79a84cac8976586ea946999a8aad0f27e701233cf3b98a21a1ad4afc2cf1e51ceb2954ab307f8fe3a72908472242fb5853e32788"}, @NFTA_DATA_VALUE={0x95, 0x1, "dd2d6e07d15c789fff8a614f06bed0ebd8342aae63b333231c9fd84b6f34181c6e33cda5e4346eb43da3ad4cf61d8182ca3f3a28ea6e5935fc7e236dfad66d4f0362ced40be0d360564db04a2f24747faef64191472ceb67cf52fc5de13db68219faaf789bd7c4c4c62a7566ea715ab0570b85cabb43970592daedd05c1e927747c8c2e194d5eb13135bc199293449febb"}, @NFTA_DATA_VALUE={0x2f, 0x1, "e3c5eca59a799e6175a832e672bfeeccc0c1e527d13a191782cd14c9152265de15fd0a4803aad207c5e1d2"}, @NFTA_DATA_VALUE={0x52, 0x1, "7525a74f9025c01cbe2501591fbd63a2093fd4e4e7535aa237166cf6987f8244db46ec490044cbbf73f56fd890f8da96332015fbb0b1ddffa996a46626f6bc6220e8e2a310e9490bbc891b3248ed"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x1124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "2f9e5b3f855aac237c4cbc757cb06d66c4625f3baece3c5b386476ffd6882a69c09fd807c1ff70f88a53af05a5d996020a779884722c2087b3f6eb0a0879538d0785"}, @NFTA_DATA_VALUE={0x1004, 0x1, "8bcf968a04c75569a2a257c707c3fcd77cf932fd28d5facaf0d32ff62606223c6f073a682a3dcab61260d8d23898c5adb2066e5d60e6d1e2a08c81e61f4bf37ee62b068a555504ce23362f2d69f6b0f5c32f7db162a1c6f038d1db501d4651a6ca2cb6a853c01db6dbb05bdfe445efa72ce90c05b2c0b61456b46343311d6d191a094a7f60f06569b865614704a17ab522354f54e73cb7303a48a0ab2cd1a2ff412e8dad24913f8ba0863b8e46f7b08dbbfaceaa78d4c2c2959849f152bc4d0f1e4ca80999ca01584452db4ff80f7c4ed0c649e86661cc588f190e90bb3eb1e48441ab9842d2e17d4de7272ba65bcf898967811d0d77360ea20a02f9d379eaf1738c2a15b96c2d87b02425c7b95f7a33cefa026330e8fbc31de0450513fee17e5947396d2612435400ed51536420dc8f8c726a093c351e9e1668ae881d67bc392c60fcafeea812bc4970df7d430189a9000026b603f12cc993e961a49354680aa51b3a027c1de55df5cbacc8217a64e41d12f47889e79509caee0b1d790d7938a6e76479c71584e2f81ca008deaabccf8ec33b30f220de3129794a89193eba9238ef4a196a09a195453852e8aed7a3a9c5220010704ca037d916abe2ddd71c71a97920cf04989225649ed71dd63a10a8b1556215ff3249849c1f99c798f954480e44bbb8c1f75aa6eec239248c6cef8ee32ed84fff68c99de06dcf0aceb745199446f19c50556481aa0be666d939509c00f178e4ef29af5c250b63aa226683f7808a6f7f139d4ec0267d1cf4d350591ae2cf4610f5507b03f3d8f41352d41966e33b7810e2d2382815afec21b43eef7030176b052942351a4239decfc45fb31579968a2a7d595acf6beab168688f2ce404d71962d877e8d53025c1d3ce43b6d4ec587a1fb6549da76aa2c144b63ebb2c3f1444c55f99f7256e7902c054d129a3fb954e9185f6ee016858a6b47fc9337ec1b5a1adbb30fada672089702fff7e6ed67bcb53d08e027ce735f58f27cd7f485ab67fd28fbbade9d9c7e2083b44532bb1fbd4c305649b02e9fd679d6912ae767d5e98a3f4782895ef8f6d66f62e6c30bd71dcfce13ef469241cfb16017e44001363f069711217fa19f4fd382327486ee9a9fb12aef181f3ae015a5cba9fb454bdc973d6e0e0f6ded9340ed8328535de5b8e6889e2d6cec8eb1b039b6f225da2ce6459868819e1da3218a8c09a9f2f62fc5b2c247156c9e53e6701982f3f92810f7cfabb13781c78b0b1f0c466490e862c3d443f741bcbe8c2827825f4abd342475662b655d4f2b410182bdeac7378e78c3bc3336d725641954ef745c1dd7a29a3214b5182b1c081eac9fd3a09e7d4d899fcb81dcaa08ef0a514e9aaea94e39c80caf4553b6697cd6af3536e9da106252fbf2f47e8149da5057acfc0b3f714e2eeed2bc7e3e396c57b338680db24a5e666c87703ad960e6ece41781c3d9ad83153bd824d498275ce7fcffed9ee1defee7a3332f50204387b99f112d47334cffac34bbefb44f8751e1347c9f3550fe7c398798234ce3b87e5a012599b452214180d33de67f2ab74af36bb25d153b43bf2e8bf01aadbed9b8ce6187f82f9ea3c2f54753f1c4e21b2eff1a21224feb236130c7ffb0d58623942f5cca6c315c063f156734d3a8ff01fbfc0b796cbfa0d11b67ebf6745898dfc0863fc39e01d9be3a9fff840ed75a28c987b741dbba575f2f4bf2e4bc8aadc812c6c9b3265ca35ccd9b0b25e9095b275be1567e7b8eea068cff5fbeaaaa9d90e016f2b380aad58cd453a74848ee0e0390b1f083a2391dc9b0f773c7eb1bdd1e4fe1e22e8064a0fa2669b07753233a770768e57b1a81bbc08afad1e1152db4bfe5d04755f26a76d664aa4fa06c1b0afed11427bfa4d18c75f80f5980ec360e0fa5f1c7ae4320603856521311c77adf6d076740e784fcab153d18ae930c0a5e61598cb32d2275098b54f55d92973bdf3e7b580e351a3a9425925d85087ee0ed01560f04cffcdc3b306f3dd7f56dcee4f40127704a4d9494a9fbf7fbefc30115db90bdac45305ed57afdf1bd745ef5e6b682f210cbdd47f4cfee0042c1db2433f88cb007c0c4cfa38f70271b9e95e41c75431dd5c6099afd8bcf816f5f1d3ab619a38418e8cdc63c1e3af2657b23f7e9c8e1e199b0ae47d25405a80fea7f1003722cf5a164efc010c063e30c28e00637d53cfc71b5df1ed1fe83b62532540d2c197168a78019c3cff58897aa1734cb97219695057e3fdc8ad939509d441efd54d54f38c123bad442ca94d6d215ff2a7f6a57693a2fbc056abeaec2d9834c90dbb649eb8ed2ab6eaa2e2a68f0c3679421ab49568ca0cc0454086308287cf2b77f56f80a692b7c5d7793c1c71974bcbe783ee28a8b93f55dcaa769f6c5fb324177534e025d19feafb5d63acf25e25eedc860df0c7ff95a7b9284a989f1c8221dcf9f74e47a08fb7bfbc7c525543486bd3f52e796e13a10aff304b03826dc742c07a0a4afd8420755912c9126b642f81c4cb205befd85a87e97478616f8e9c3ccc7aa5f21b537b278060cf3f53c1eb1d948dd09d4377d2f371f400c56d7b8b39dde4a9bf6bfa812727baf899eec1e3bbf34880ad7d7130ef3ca5cf4d84644b1d26c77388958961905596f2cd0a8e6222cf0f5974fcc736cc8ae03c218aecd31dc48bf5c4997ba946d0f91286f4a3ca67717e31f3f56a954672f25290c5a05f11c54178b80ac8f0b32eab8b2b2a89497fda6507b1fba0dfd08c36f932b5805aababe1e20aa38cec4559610f98d089d7611ae8eba9ef9d21699b4f2fed95231ecad5f11fd8229927e63f6e77a072c88f3f15c4ae7731994339f918e155a3dc32563be8561fc56de064be05242982d849b691008c824ea25d6ac0f9d149d0689541df7dd6fa1f43dd47df99549339b57dfaa735a9c6ffd827fb747e41d36b70732e5c1d58d01a50c4cc2b69f7727f57dacc013215871ccb9330ffe3b30f8ee0958f1c8e80c23c0a4e93b11f54f5a437a3c9bab5e68d23a06ddfb696f173ccb280635af1deb38a4ac337d8901e6ce419ed369a175bbde0f66d9765b83475d919e39d290994bb6bf706d245cb7ccc3138ed1884deabc910edc5b961c14195ff6c781ecd2f5993c4364e24fc36846753147202a2515875ad9e4c43f0434e3d300453e41c7f86a4971a540b0c7ef6bef9cc9c61e58a8687a22f5a6c27c69efa2841f407348444540ae85e1ab2353553eceea819da2a11fed904c2bc0f35a4918936fd612bc6e1b153ed8c59c723a5c4a7f55771c7ec6d9dfab5ea97702932f3b0bbd65af49e83f1678e8fe7b7f1d19617b4dc47248b96c6e4bb5bc3fd776c79df47999b460b7c130b3c41ed43c9f51e74be61595a3ce9709a969137082981c483417370435fa701e19fc7ed4085d54434b7cf15f02a8f222b5d3e352bd9568ce86f52ca1a44d6c6b7611d94515e522336bdd5d7e5aab7112d9be74377141901307c5613e0f7664052727e1b4f548f4b23628f482e26a3555afa03d80439570f542731368d9716f1f156e41c3c02c942e0fb6cc4624e727c0e2c60c6fe5e0ebb5e58dd61a25d43905093e28818b2f1c98471c1cf6c3b3540f5eab8ea51ac67ead3479954fbbd34b48bc64a1b1e1ecd751b60981849176fd14f755728a8f7103ae7c5bf2c62e6c49037229c2906e8c9a5bc40faec1ea216b58baac789ff99467472490a18307bab5c34c42019c921a0ef5228fe2b9cd28ecbb669a601e61512c68709ff40d7313709b377de70d15cbdba79013b1aa6ed26a6d9089a3c6c815941b5a8e62c3249faa972ef29699e224bd6e3c33b53fc30ccf3924a921d78046de103cc4df165666cf41b7b2f9863cc0abe38d44510c8c6858ae0bf5135b241c75bfda4c5e93a0cda2e9f1e32db6923a53b28415dcc4de954f6e85eed49d57177a35cc49996cef70add7314ffa5927a2a3ff44c7162404e26537e164c444a5948f035fd908efec5cffa77430fb521d614bbff46493ba55333e152d7093a5f6c5cfe796e44b497d0bb06eba38063a79eb50a078426a5b7e96e66bf918ec3efa5e3f2e6b1472f7063f7209de9c579be34ec33631a63e54241798461f6812f4f6eb329264f8a29f17d84e1b843c26e258bdababbde7bc72c45cf32bf9e0f4f9903506d76505c2fb829df8d3569ef512d3e1770f591ef0ab7c90fdf65cdb327e10b9c2a1d7d5e815f7944d830d338d6e66e23e29f6425a72e4fd6068badb337c2e4908effab45897070c7662aa8ad91ba8785fc13ccb9b613c92f058bdd545db4bfb08eab7a0c781124af0c5806f23ea82894ae60319c7e40860838795b5776baab7c5bbb4a5f5159a68e78c6fc319c98daa46b53c445beb5a21b2af47a1b13ee78e668e2317dd7d3bb45243737f4453d29af3dfae533a703094dc9334b6a7fc1b5591462e4e6c902fa79befaa21aa676e16e6763a880b46aa6a4ec0a56d41726261fc07afc6e5ea276f5044bab129f4d1de3ce89be67d441614fd356106c6a6635c6c2807b0bddadf0d506545bc8153763a80dad713c7bd2cfde6a38fdf2efeb73b28aba00aa2085632543a385e77c4981fbef531ca8fa54ed44fa41d6d51eecf934aaec9fa5fdd965588a7e691d84947f9f09903bc6eb779617a16fc4e41a1214c93ba4f9f9ebff0e72a2f5b547f38000959351e6ce08a8de174256ea236b431609987aae2201e5ac7a24b4a8f3ba43c569b430015b2817df316f381731e3dd5f36a10f19ad7fcb8fd0ba482656843794b40eaa40fecbc027b22e822581cab7b5cc0b01947b019e0ee7c1de32f1fcf9ecf54e60d3462617294ef8d447e66500bfd2a464f4377e7a3aa01b30190cf5ee3ae11f07c43814b2d55848dc54e6720caa1c5c3cce73ffa5fd673a77d77313091b3fcd46a720c2c61b579597e21fb8ba1a568fbef5a0acdfcaef7c54fd77b124d7a615a41de5ec61ffe8873a24b436eafcab213edd469a78d9cffd3e0445faa9c6b3ef886766d142a89718298eb8b787e4ed1559ec6a7e1556244c0b5f1612582a84becd9403b1b40fedd870a8dc28fe1d2ab310b0672d82ecb647168ec109d966f8a9fda0565051bbb305d267e0b69fd3536960758acb99df455c17e6a9ec6b635b496ec9cfc148fa955c989d840a44e7235f89b6b80ff070330a34756429f24b632d3c9e13bc87a746611c35a9aca87647b198c024a0cda6a214f506e47e40a42a2569aab2ec21956495964c2dfb6ed4a2c450849b0cd0f7fa907fd09a249bbbe7164270767608f2c79a85e15635c86330a2b22c7023bd40da5238b28996992982b9373ea90b5283b6fad329159dd744982112137b8862570333334dc40254ceca35e0a6b187fbc7ac260daa6fac307088346b944514c218aeec73f1a3f01b30f29b8696683d4df4c15c4afd4e01850bb43ebe77b48914da53915d572525aafa0c7dcfb9aabc1bc6e7f81eebadad030d10e449a29d2fb6aa46326fefec74363edde3a426610262b080b420fc00bc00349e004268b4cfcfbb9c8a11e090050bd97b744658bf60ed08b28af457e0a73ffbe3dddb5e9ff86902ccfb0910f0ec71112b78b2f3e93c80ff16da2c27eac1de76463a3e17297d7cf150adbbecd0658f23e34c044e4f5c3482267cb5009b51d967c6e9abbe721585f0b4a5cd77dd5021bdb19175f952884d0b39af991e1789556ccde7ad6ebd2445f39fe614df1f03d7b9639fe54b282e5eba9fe08719bfd0ac702b070353a65684620123fd80bd78c8703ecfdb8c560c301aad46cf93a95e0b71bfb0"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}]}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "2a8d9d3c940287be7afabdcb51d0db772385c6696e4a519a9a"}]}, @NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "913691605bdeb9aa88353242da8dd77a7eb3248057f925584a1fb1223d5a8c93876d777acaaf494cfd870554b586dcf812f0fb4caf134c0a6ce5f8582943878d2bf7ef3a3295cbbe38433f6f5e86b7714e346cd72cc66d8c2f95db7a14e2deec8bfbf20c9d4ee94210d0cf6c1017c7fceb692e91c437f7863a36616418c2a44b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x11e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x81, 0x1, "ce04f02ad0a1a6dd8e5bdb5b1f462006c44df3763f0955a0fb1317a65947ee069a0a1ef87ac2ec2f0f45e1d921b6858ade0cff1bfef8c3a61b3cbc4badb843c261491c5e993e83b0c92f6e499c7cccf4d131954d9a6892fb7aa91e27de83c781a1547417a86862d909a0cb78b922808b5fbc50d0f3e234117e8f2f1f7a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "d219b3bf8b44fb2b440bf1119756988ac83e9f8273dc6f64536d9afae8eb0bf063e44219ef21ce85154c299340b4339e1b19ee46a26eec9785660c99efc3726ef0abbd8e06e783f8614fb5ce112b9aebee50d383ab2a7a9ef6915adca4ff38dc6ef665dfc19433fea18c27c631fedcd29a4a01eb35acb1a135d624531c99a2c72c108c8369033bcc9c00999cfb86fb1c9439dfad6793ce58f748355d0bdf1105d90c41230c32ff537e541b23"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ae8, 0x3, 0x0, 0x1, [{0x4c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa8}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "bca089d9716aa28b811a049600b0a8e31cd04dc91d918a0e3ee9c399f6f2359ffed69da0cfa61538c696c242fd680c76775cc1d0d730db9a309cb28895d695ed05606ed8b277ea6d4eea7bc1c3ec6f098a99b7257b709017f101a083af28a6dd4754f2d1a8f92318c95ca2f7682723a42ac34b29d2360bb8947548e84ba37fc087894a53e3d555347909d7d5abf448fe6fb9eb4216df9e388112fcf2e83a6fb48a1f7335ae924bee4924dbc192d903ea0ecd4f0d4cf9a5a27a"}, @NFTA_SET_ELEM_KEY={0x384, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "4556c7e9233215c2ea24fb90233861169891996f698191afbd05d1f2ba84b30567dd4006a2e783a4e633e6a9f3b93c15e29155a258e66d824181a2978dc992afad1a1cafff31e02d4aa2026ffb5baf647ebeb3d6e7b5833b0f88cd2f1cf49dc942d1c1ea0f01153baa8452a15a7809ca3c5ee3081b3689932f42955cb02897bb728705dbc94273f1c9277bc6355909c975c4c1464d71d3595adbdea606055e2a591fcd71a503d1cc25a0bb9c9e6e484c"}, @NFTA_DATA_VALUE={0x97, 0x1, "13db3ccb93a326b5298baebcac7987051de32e6137381f272aea022740e53eb2f934b1e646cb10d30a92a2b88cce3da6cf365de5963cea26a4603bc1a90bd3e56888ebeb07d11f5c6ced499aeb0ee695a1297647b9161a92f4307e9e4d101e813df4d4effd07d146449416ec0fee8b8dfa4f1ef5761138fb06aa6e219f5a5f9e71f6d37d923f75d9a8085bade8a6d0bb692afc"}, @NFTA_DATA_VALUE={0x59, 0x1, "c6f60bde9274f12821f4c947aca1f279567bbcccf8976e98f7627bb5c44b5bf4e462f35789817edbed61535252d444ba439fb3fc0515941a2713c73de4c899a2c0b0d34815d918e23def858b98c9ee15aa524e362b"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "2916725e935d95da1a7e7ad282236552fa47cbaa9af250cfb6fe7f5802ef8cc30e0d4b10ddb081ec86261da3d032a64ee795d294106b4360e8765769fae14c72359450d9dd411b05769b1cbef401c58ab41245f05a6ae5020912e8152c367a281e56fd346d7048ff615cc2a3f9fa710523c12147fd460c11599dd4f55655ec82175ba8b65ecbae5b4850dacd824847b9452ddff2f487f47852946806251e"}, @NFTA_DATA_VALUE={0x2f, 0x1, "20f884ebb265ff390d4c6010efed3ee25ff026db08a97dccddd654d78189eb33da79244758a00d52595d1f"}, @NFTA_DATA_VALUE={0x81, 0x1, "2c67d7d6a14f1a212729a2055bbf8e19b0379845b8c21838d8013121bc71927d332e2b15a1e5ca451e3641c7ec90be867ae41f4f35ece5ecf42736825878a997b384c0c51da5bbb7c0d55e87ab2e1275abc65a6258b60c2740955cfa6cf2e24dc7d6264cc2e7c7aea4180ed6d381d9662fc8b04d31114377e177ed9bab"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2bf91356a9cfb54}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xa803fcb02d0efb9a}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x29, 0x1, "82ef82212a519183988380b7e47c6b79e5aad061abeb9c386bb5d593b852523594effc1f98"}]}]}, {0x146c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "edbb2fe4f57af39ebf6d10ea3016a42776141f058d6c94a2534dbfc6f6e84cd6457c302a94d9f867297a45c7cb54763d6a8d1ad69845d1df7d70b2b2ee0cdde2092a5ed02b8d9b1d3d96539b3919a89c29723103c538887c490bdcc0c558c30ab8b7e99f64cabad05ba5e60469166fa11e57b464bf3d50ec7a4184cc6c90728dc702fa7cb6a123ec45990c346b7f7c6392ed28785da849fba25fc0df229f407dec753e74a69bf0faeddeb55d8e22f3"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5, 0x1, 'x'}]}, @NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "342fee5de81bd4f0910887148553f5b6abea1891e63bd21fb2f7f75e42c9af38d9e0142297caab8f7685c9209a749935eed91fc8f6260b94106d0c8e3c61202fd331a1da8b9d307dd9e81b2462181eb977181243cd71bbc90d2d494721a2419e46e1ad68216a00b0e8e4a684792608563f52e50f2de43cd6d4b69abfc043228023a8b9b9d47e9fe3a023d610c8b7bf3c8c504ea36863a7a5192b6ba5a45ca452a97b3209bd1ebd7a7367ff1fde374d2fd288ebb71c0aeb6d07e39d91b804b4de06e93ad5244850a1580f20a00ce0ca2b27d6a91a468cfb48cb803f0d7d85aef9ff8474867e0aceb0"}]}, @NFTA_SET_ELEM_KEY_END={0x1280, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "7d5053c50598d202a8a6d305d6337466d655220e90107d1776df9047338c5a34d492cf56c859cf42b208cc18504dd955430cc169d52926d3f89ca7917342ea3cdfa90010efe0202ade3f56a6af0999046e62c58dd0bce7560aca2003e4"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VALUE={0x56, 0x1, "9967d23d3dcd49069e98839e1b989e039d1415eba99465388df3f3df45ec535117fd37204f7d107e4232e092b13dbb4933ed1b309430d57f85d4a8e863b8e682fd4ec9846ae558e2749ed5d3ca5d11808a9b"}, @NFTA_DATA_VALUE={0x7f, 0x1, "73aeb282d107b114fa98724252f083dd17d40d0ee39538bc70069e0866c703d9e38db5449f9110e93c033320369a5c83fa61deb550800799b3cd50aacd74dac24d0f1b66dd7ade78aecd9cd5afa0bf89e4f840e08e7198d11e8945a6d873afe3640b7b057a57ce278d40f042577a19d79279424f5585d042fa7ccc"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6020, 0x3, 0x0, 0x1, [{0x664, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "e5345bd3f6c7bbbf160c18756f72e2b36aaecff87c62088e9f540ac8bb0afe240ede70566b73dedb49cba3d8d1190e717624812a3652badc7294b88f10090953aa0132d81d706ec6cd977d794415833628a8af541d65e3c0acbd91807be5ec2289f50396a6621609b544916dc51ab9e9c3af8f8d641b6ae69b81ac66e4e69f4cf07f87395706120c3ddcdb0d1b80b159abd55651fd59f6d30d5232e4fc125a0aff1a6ead3f2c8659f6a382880601233926a935f4a7021f95dac6520aa0afba1a2b138d173c243897940ecce2b6458fc104551b771a37ba0697c99855e96bb9d086b03ff6"}, @NFTA_DATA_VALUE={0x26, 0x1, "6d699964e26647d78aaa8ec0b39ab99cea2365e930ec072c22b28604e92baea9d93f"}, @NFTA_DATA_VALUE={0xf0, 0x1, "d2f45795e2535d1aa92c8a5a1c7718a33cc2eb5ba7f5e2f16c08ffdc597b358d21a337fe251b9793fe90f401ae3f47f5a955d21fb672c3f49107589474efac8d75d0adf03bccd84e21196580893b66a31c5d07a037eb72c0b729f3bd38dda5660dd8a3b446ac4271b5980bce8180ed9c921d42a8bafcf684beb099041d3aa87379e9170c579213d790a85dc54d25346d23656c643670b186000080d1c1faca88ff66ee20baf7f1c8c10bcdadda96e90a0d4070ad7d7764015492fbe307343402a506598c79be67d70848afa5522a2bd0825e3aca731e89516bb063b1425f6d581055baab89094519da1932f1"}, @NFTA_DATA_VALUE={0xe8, 0x1, "9da2d2656aa8871400c67a360b4934b808a0931480ff959050b8984382fa460976523fd8d670d72eff298b0e756a9e95ef7e37ff5aa68d4b66a50e0ec51419982dcbc88817703d4edfa65f5efb79ba84aae1410cb39a0348f999785a2308616b9869b052d8f0c3918b4833f3ea369b98c00f2fd7407c897333f1e246bb16bd784b828f8f77e64a86b11a40f7a56ec6c96ffd852d90af14cebaa358c83bda4c975a85d3252a9150d4bde1fc75cee3c240cb4f24e22e42077be66cf44bf0cd1fa5c8052a6f3c8336872586979d457997725bdb9318f9106839799a2ff7b4bb3bfc0d6c98b7"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x21, 0x1, "2c4088940defb68cdae53c29a8a746f6fcb9017abc0e6c821d4deba7bf"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x73, 0x1, "482222b66c622e920455b0abfa879552ab744baab554471c6318ea41c9e1023b97a3e56cfa391e4a9ab1fda5c3590eb16de1f11b4256a707843ad896da1a16d78a9cb7c1023d96d4d86b2da5530964feab8e2ceb42e81686326b22e78ee4eda14f0670bdb53a83b886ca7943f5703c"}, @NFTA_DATA_VALUE={0x72, 0x1, "8ef5eb15c72bcd586d63349cae804fae0bcbef15a8ee9fbafd5700a0ff2a9592f0280ba56d1bfbab2cb54fe3270d1f2972dc186769cf0a1bb24325be44fde1421945bd6448ff345c4b2b46d02aac17946ab1459dafc0d634e01ca88def4b1c2b9dd46d2aa18c00720b4053937f44"}, @NFTA_DATA_VALUE={0x39, 0x1, "b635bbe9042c675fb855f8ec2e5e9b322cee74e8c03ff9b59860c456e4e7be5401a7d36f7b2a3322e3266ab006db88b60cb61c4363"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "06d7a0436839b0857ba5965e10b2b8c5ffd9dd8a293cde00a923e48c54162d63b2de09d0cf920eeca3222ecfa854ea1f0cfa9aac747880f5f9f52693318e5e9d2833007b2dad16b9c8493bc3a3d0e4ebac26950e9be3e34d5ff3ee260a268f9cb3dcc935bf9f5c76e1e72e1e9344701f8c5bb6c3d286e5dffd974402dbf130bf1b1984d8728dded4db4f4b578e361031b3761844cadad296f20b177106c813ee42"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1504, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x2dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "f7f3473e03216f7627edd9f145f532efb72a3b9c88090a96eef3"}, @NFTA_DATA_VALUE={0xe6, 0x1, "f910f6eccacec16eadab14fc0a4762c879ab160934cce8a87b47d9245bad7b7a5e12b3c6985fd5fd3f92f38a07e97c3fa4d13ddaf72086e506c78b61275653262d5c98a82262204de6eb0a1f34cf2615b46069cb8bf6a124c432efa76adea216857c562336511c92dd2b48e159c359cf568f94b4a10e9ef442277279f01cebf262bad45ab8dd611fe23faa9dceaa2b10588274c4c96beabf8dbd2ec6e8967510d29c4e7e7ac877491b02cf38c091c0fb8a714dab4a1d0135de344909d32c94602a7507248d36524a9486b5e828a3e6bc2efa7bce9daca4d51b6ae331e36882f0c418"}, @NFTA_DATA_VALUE={0x5c, 0x1, "754222e36ebe779be42db3e79a790257a546801e6265818da57bfcc2826707a2daf0ce902c41d16066d18283ca9eaa11ba043a4a0c3bfad8e0bd75f1dccbbff4c0ed4ea2374af01fdf7408b60c9caaa96fc708dea1445e81"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x1204, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x19, 0x1, "06b4da6a4d7946d297d54ff18b3f1818fd6ae444ad"}, @NFTA_DATA_VALUE={0x91, 0x1, "a6c8f54a2151893c1bd7d5fa2634b9d44eb56f50ae87587660577e51501b04b820d76a054e99006a614152da0b7dcc7066f664e71226b30bd77b13d29649b94dd3d43315abf99ae46fad0bb7afbeb6ccc494a11d2c43db461f96960c32d83040c3aee4a5d5b3d87ee5704019c3ad6b5d4a2b545a73ea926962b1b85a8c433c055ff1d4e095eb5329ddd43cbd92"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xae, 0x1, "ac64f0d943ca25b80ac6455dee6745e2ae8f079abc619a9678ac18f978de1011d909382a0caff0e71f113c8272ce8d72f440b576d94f077e8dacece666bbeac3b755b4d4f5faf780bcc6328cb21eb32f9cbdd9526b03b8551e7af1f7215107c1da8f57ed2494e1856a524e47671527ae10f23699eda0542d6f6e0e40d21b135ddbe37d2a729c2ebf9b4e143afc2db1f24599ed7d92f2df5eabea128be34f633880e41a98ee88b194b000"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x44a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1074, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x48, 0x1, "f0d474bd080ce3f03011db121f06cdbe93ed3f76aa71ca02c8cc4d9434dd8ee7582715aa1894f3cb25d1a9b0f01eab2dddad9b8eb42779a3c652b36933f99ff4b4b3ca55"}]}, @NFTA_SET_ELEM_DATA={0x11ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "b35809eae639e53281fa39dc8b3b61e94ec8ce540e1ec194858f71de64cca6bd6d05cc5fa3f4c3f22d68f9dfca944ff97598c66ff99255f45eaeb1036dc0b6ee36db100fdfdc4ba48c0a344026f88e500228117825b5d503b426e7f8af2e649a55e99824ba6395b5387ab0a387e3e64740ea05c423d2b8d695da"}, @NFTA_DATA_VALUE={0x96, 0x1, "4f6d06878f1ee99b7dd2d51c8cc1ae1cf4a11b796fc5bb74be563c81fb534cc8c9d811a00f6183ca866cb7936485cbe9bb1ebb2466d1e2b4075c04bccc38f5e0840b15e4413bf3b036e89808ca80f45db76ceab1c9407b81885dc56fe69c4c29dc86ef53fe1eb9ce3d90fffaac79a5264503ff34e730b88db942c05bba29aec5482d9713d7fc3bb50ec70378d5392e59096b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x2174, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "6d558eb9c0facdbb06b172181768d50ec74d6ad3412e8bf70616b9e0aac0ccac83a5bd677e2153ed81f4f1350d7db0e9ab65343dd8af952069cd99ae96ef767146c7618a3a8103c3024c69e4320d13cf875f8467551ba6468277c8a484e77d2b04f9dc44d2e816dec5e96a1d3a47c0d9467038b38feaee111798f8dfac2d28cf3d2d4bec5282008a9238b52f386772baf4705451f29274a6e213728db55a4d5975574362b9a8921dbcd44af1868755081f27ddc635c31222a3b36b48460222f7e73200b4ff10889db62cb64ac7fde7d5fd4421ecd1f6c29766d1d3d0aa64931dc4b1bc3f510ae338903f7ec5b7921799df7962b139791fd6d7f7419080e4b1f345c0a17544e52b8d323e735d68e013441437686ba4c7bd01944d62cc4b806d176d12d64c4ef58794e2ec509e122bba06890fe11f51ccea21418f13b2ca930c21c81031dafb45b562800cc25da1c3586f51115cb183b019ca33fcdebed891bcc4d2f51f3b558bf7b6556154134910f1b26b2bf26b95d5102857eb9f4020ee6ea7d1f59f9c4de4d38736d2fc8d94e4a8d872c5113134926c054fb50b6d05cd423bea374317e441007b2d71315c29332c23750119f17fad4aad962b99056644dd92891b7b298eff9b24c2b314ef12cd6ed98b4cb8cb9dba2e44c21dfd99fece59ec91ca7c17cc5602d87ba70dc780e14c2c258f32b09d0977cde95a80fa463fefdc09c515aedb16000f29d516fa5fbe75b0eef23a479b89e82ac21a6f2bea2223d3a0ce611630edf454156c499e825a48718f434b05a5576178862b34725b1a63e398510986ec7e63d19d4a5ffdeacba31a26184f642e7a7c19df694bb914c047c6c5e0ca1cab516b207ca614f627ae9f84123dc96169e183fdcd0e42ffd415bd75582893708de9c2911c4820acbed0d8190c0533784ce3053d55cf80927d0b56ee9fd34f4bb238566e52b89a3d7b189dc99a6e9f99328a8782f3f616b543a65e311c5246ebda968c10960148d34d261e2303c2ce0b137c10b3bcbb92c01c3b9cac07d6390a4d9e44c07c774c360171894e5ce61b6eaa41fce5ebee35c221cd3ac28368f2eb59302634a1344c06819c480f04e78b4b72ed38a3c2951e5cfd81b65ce2eea6395724279f5778643628d2f72117c1ba320df3855b26e83cf30215770d224b839d0f888ff2b705f0ec0473b3425dfb0243000c543ac8dfdae0e29bbfe8dbc88d934a5908ae5853c6b49a27055bfe2e4b6fe46853006ddf72607794c60d96e9891757f17666ea1dad542a8f1b46843a48e43d770b04212ffbea40cbf1a1293ee02ebe0145864a172d2256d67ba700fb84d2fbcc02896b317773cf37dd6fbfbaa9f5242a40dde4470a5fc63559c95c0fbedcc1eabee3fb354169c2bbcef019a25f1cf0e7044786b84927a5c5130f7118086d9db9a4947688e5510443ad7385a0fdffb0aabc2a571d4a5ef54ef0b0c39c5a7299a4ddbd5f3b39b24b5f2ed12a80101a4a0d11fa56d785312a6b5a41a89aba44f38668e9bc5512630581be89eb94d9878810cb000333b0bcd54f429d9c54fc20a68756794c3700362cf450bd0872aadd59001b7e0fded93a9e574baedb150f281d3284cac9c77eb1d6befba52a5f447c5dd9bd686cb77df4babf055650e2ee2f6eb869fd911f90096e8d73b4978dc03562a048a84e812de6b6e3e518b979a30ea93a1b25ef96d141e39d9c4087cb18302367ec7f2f80289e226ebbefad881c13d6a8280eec2647de7484aab1f2f0804bc5837cdb2c1ce2ff399ad4dbf64c1babfff6245916074bc632fbb4b3e2c063bba5f328f64c10c5606aa10c47e22539308a372daf206dd28e04547f0d020a88350826b474bea80f87d969823194f88b23975bc1ceb5e997a16cc6176218e2a507e23847e560088b13d58ecf1b6f060283c885f6b7ef38f6d28a0f11c5068f405651ccbbf7ad983e82d2740455a493be1ccb91a3dd142e3bd6bb54b32e9d814f674c44d2db432dfea683cedf1367e491526fe234e450a8ab800a32cc28a2d37ffdb8feab2103810b957d22cfd0af9ad0c041b7db118729610f8176ccc1e0460ded68b1e97478b54a6c69e8f99a6ed33afd9976675a5ea2e09f32e87c52d836a073054d0e132b9a7b716e8fcb2eeb3ad4bdc2d0889e0a280723ca2b3bfd19d67bd9ad457c6f714429a19dada2b4af67935f87a87d9328c38495984710cc028c1a5e5aca1511f72bcd99c35e1ddc1cc0e6491fc70aafaa0012d142a85a9cd4f3157b0b9ba24887fe103c6780d5897a204f42c086ccbe6d455a8f56820255bc6d06b22d84b04dd43996ec207abfd5626101d9fa2f8a1b33e74b89e101462ed5b5ad082add8cfab4995f664216965cc957c642edb52e8f30569103284258caa7406b1a633be33717016580cf4ccf697c9ff425850e78f75903b83889cde0d7435a782ac05c36ebef61630066cd25a7d7ef6e2a20ec7cb23cf766212a658d23f9b34f98d656dfd412dc969a5e383fcc34c6660f2c6f4a9f32bca3eafee24462bcac70375d0a79d71f380ebd06b044f577bce52514c96a6b0542860c3f39ee2a7fc797b7c77427ad135062a6035437bd551e9ff10683d801383e0a421d6d0f0fcc9c0baccd9ca237cb8dff4c6c178350e9ef9f14712ff4b94fd3c543381b33b84adedcf536e97d19ce33a6c53063cae47af59d90ea5a33d1bba7c79b40a088c2e0eb960a00afa349c4426f24f36432da2760d94464ecab42e34c3bcb2c5a78ae3e6e5ea87a359a8e97bb696691f85dc8d1aac333a059f3d26f0dd3ef90e112d5f8bdf545f24006269097858bac8d22856b017643bc643a4a192b381f551afcc2292657bb6ff2c7c0e03a9eeaef0a78f5088b06bf7a0a3a2f7dbd5ca1cd2b60e1a0b4c41e0ed7904d213e51200dceb3f4fd8c6cb1ee391b010081479034d272243b84aa4dd7fe3de32150afeff439d45cfdbac4302e2fcf864ff4ef948f7fa60ff4f591a53e1496049bb3af78d1e89cfb4aa15acd7d563bad5fd3b0ca78a8159c2664c94c59ed9f65fd787463f0dacfe220dd3d649db37ca5dc53c83e0d412fcc709554f85bff6c2afc88418af95d7ca582c734b6d10a5f4e49d614b1cc4d0006ce3cdce4df06343341f489a24b02e3f3cf8eb11f2f46f307d4f24bc0e8934e1935d85cf0b850a6c70b05f9f36a4fb77536fa97f0747c5c390ddb21678cf3bcf73a190aa021485eefe378917b36eb76c51aef6945709d82f816723dc62d48d41f3574a669fb5d425231e23e2cee9c94dd8095d9492d86cfea51da76daeeeda6f64e75b72d0e25240b636481ad5e5a7a4a14aaaeca3a53b079da8871da54825dcd104d529a870d03e162e58f4ecdce4cdbd65b05bd1489b4c8c03f9dae5b164b59a7bad8b7d8f72d5ae56e90b67bbc9d8c590b89dd15c459a4a88385b49cdf054eaab89505d8c56090f53ff9cc9244fe84ea10865a7c3401a46906ca5ff8086d49428e73025274412bdb492280c9509de9f66d514e13d4c083060737c1bd7fbb2dd1ab83e708ac5fc23b7ab77b23b378c90fd368474beb22616fd3a03a94f2119760cd04979f18c5207c7c0014cbbfcde458135e6e8ccd8b413b1e43bed5af9ab5347998e37a0b2c19b380d8cfbf8a10a6c9f8a846c2ee2fb16004d2ce0d00728d9a75dbcc8a33ac5f82d7662368107212f8c4b97391486f3d379c83d7c75a1da3706b661ebd021491b4787261e4cd776559160ccca5c23d809fbe875c792dafed8f9a7a1395a5d6d607115faa7c0e0a49e6146cc7f1f3f92edc2cffc589ede0d810035960db53a87af4577379ed713c02096fe9c334a84baf84e5d3894c3953f37a7cb5c56f12399c58187f9c479504b8ea9c5cf1588d21a1fe8b139a28dfecc44ebfb9ab3bb339bdfc7b6a289c8c62db0b0f0f209a85523c1503b8c4bc537fe95e64cbc446b8161eeab15e99981098945f9483d6a1ff660ff7902ecd61ccc59c2135f83e75c100cd36c5c08fc1b9a26943e599c72a6d13000cff40c1630da4457e26e9609769b63bb75af83d1dc575a98731665049e66dba3ba33ef2162508ad2b0365dabcef3752b5c917bac23e1f3792d9b0d7bb3ffa2b03f23f9fa9b9edacdaff80072ae7156e63ddeb75f80e0a2f8269e3a799649028b17dec4d98230458bf9d427aec15ff5c925eda5d1f0437f483bfce93b48ccd82026631c8fc4a3e4c4f5b0a70d13789ae951434a0579815294e7f3aca4e24dbf9dbf6c6dab293eeac73c35434e886e807108f428e56c66c46cfd79ccf6f9557e141812f0707a1db0c93a014e8e5fb16487b0fcf4b09bbd86af9e5be47f8485c7f25b41057a2065ada23d397d54ae22a42581910f81dfeb6bb0972830c12354507d56d877d0f7ce67315c6cca2748a304e7bc47a6474dbd7b419e76d354cbaca250e58948c302f5dd5768cc806690f06e9373bb70ab1e40960c18972f1a747317371f987ed695cf353b02bbd2be2e859aeacdcc2ff2aba5fb6a5824643f65a99757335abf9756b9ba4a55e366ddb46c412ff17a1555e0b35fd1c7810d3c35c5236f91635a2b73da7a860e9dd8b96c91d81fb75c7159574b098635c28af330eb8286d1c70adce0786a5c4c892d06f25fbe20b3ba143e8bcdcd4c0e08a4528e1b4c4330f54cc7c379f7d4a2938782317104c39b5fb1c7843a4e47c7d64489031ab9b2d4f981b855daf52e7afab2e5a31e4b498a55057eca7be44767fc4f0636b8328ce6cb439d80ac2047bc31ebebf4cf341824096240a7158f28325e76727c6c64551338837b7f4c53518e4abb4ed62d8b4d66df12c9dc8c4bc6af9626905d01efd79660819d677802b95b9c8e7b3a8156739328948a60bc637384af2e798f5e865adec9e250dcf00dedd8fe2deacac9650cf6b72c9beeb1422d60cae7f544901ffb63e09b77a66b860008153ccc3fbae08ff10d0f8e0d7743a8210c099cb90f521733b1571cf82218a98e3645297487d1b06589169bbd837080ea8702c34ff4dac60f8893967ed159b72035a775a273e46230e6d74d0b32c223c18bded04f09a12b26a7df867b790f33f86ee35801adf41af61f0f0b49a86fdd22179f953362bc0aa5f7f03ebdb533208cab4ac764c7293b711fb0bff445092dc17928e54162e35c3b1489ec6e67eec92970ecd623e0e4255217f92f38f5fbe1bd72ca3fc49e2fe69e6c49432f7a2e78f02cfac4c2f1276178a5f26178d338a9d19c5da1df8afead5c0af99c58d7fdbfe05ec6671c844632928511201e48319c54bc42e9877d2a4a864f8a2f91bc18baf9e12178e5a32393b6d48bb9c84c77aea7273fb14f56e200187fe3a54d42b25653f3ba381243ea1fd353a402b2f39c70dde265aac30bef051b15107d4577ddd6744154c73f9124dc3014de7449cea321482d71dd3ad5e375d58b025b1785c8c0c1aa453b6227296887a80126c1850f3506736214438434c5d1f0fbef83a3f4bc664f2e91f4e1837fc4ba368c0c7b01412920fdc8e2a10a6a30cde77429fc19bbb1490b6a5646267eabfcec1e26acafa69f6df9efe0ed93c92ed3d04efa2e2466ec60587d5e1fe7ba3ba3eb03bf13c186753f23318d057e0e3ccc43730da91ae4dbbd884271139322a6be4ba0a1d7f0201e66c142d380e9597b25f0807c61a9cfe7000b191712ca8129a90966bbdd82c85110817e7ac58aca044871f331daf5d33b25a27a3295ca8528bcfa4451b0b636f5827d4986a8aec8e9b5b470f2b0d1656efbdd20642808d5cc47a10f3e97a53e915c46a9574f8c88bcdb9c84efdfdeb"}, @NFTA_DATA_VALUE={0x86, 0x1, "b55d482e5090fc26b3de9dccb46fe3ac43e6d19eeb4f948ea3e8d7b4bacd6ac15349a5ef89cb9730434ef3379126e96dfa792f86850a56d56322176d0a6904cc7133b41081af2a6ec1fdb3790295a6407715d267b73678725d0a81572c5fb9de4f899e83def19f76a0b468e8c059bd01a2a9da23bd298c8f2444e31b00687f8a630f"}, @NFTA_DATA_VALUE={0x85, 0x1, "6d6dc6e0492c9b5546fde4720aaaa0890911990fb3cf523c7b63b717445398668535732a14fdfb746f958fd62fc38e0da5672e54be5446fa237037ff6a9eac66a74d76f98d771f5314316802249431c5f60a685bbe999ddcceb314dfae5c2c9344d3621a1e5549d8e729f25567742bb47429f1fb2d52c5c7ae3336d489564c1577"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x4}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0xb03, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xec, 0x5, 0xa, 0x701, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28865827}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2088d3a6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1fc0fb64}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62f549d9}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff892}]}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x545f230c}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ba20674}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x333ff1d2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1410b3f5}]}]}], {0x14}}, 0xa998}, 0x1, 0x0, 0x0, 0x20000801}, 0x840) 16:10:16 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x183a00, 0x8) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5801000010001307000000000000000039ed0b306aff2fc156c597ff020000000000000000000000000001ff0100000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) [ 2447.323347][ T4689] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:16 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 33) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:16 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) flock(r0, 0x6) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_setup(0x6cc, &(0x7f0000000240)={0x0, 0x42a2, 0x10, 0x1, 0x24c, 0x0, r0}, &(0x7f00000dc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2000, @fd=r0, 0x200, 0x0, 0x0, 0xc, 0x0, {0x1, r6}}, 0x62) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r0, 0x80, {}, 0x4, 0x1, 0x0, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:16 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x1f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:16 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) io_uring_enter(0xffffffffffffffff, 0x2eaa, 0x5234, 0x0, &(0x7f0000000240)={[0x15d0]}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x30, r3, 0x10000000) syz_io_uring_setup(0x84, &(0x7f0000000380), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x401) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x80000, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x2c0980, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x6, r1}, {0x2, 0x4}, {0x2, 0x4, 0xee01}, {0x2, 0xa, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x6}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x0, r2}, {0x8, 0xa, r4}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x0, r6}, {0x8, 0x4, r8}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x4}}, 0x8c, 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="04000000037c0000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x7c, 0x0) 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="58010000100013070000000000000000ff020000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14020000100013070000000000000000fe8000000000000000000000000000bbfc020000000000000000000000000000ffff0004008000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfffffea9}}, 0x8004) [ 2447.550272][ T4744] FAULT_INJECTION: forcing a failure. [ 2447.550272][ T4744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2447.563555][ T4744] CPU: 0 PID: 4744 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2447.573617][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.583813][ T4744] Call Trace: [ 2447.587087][ T4744] dump_stack_lvl+0xd6/0x122 [ 2447.591780][ T4744] dump_stack+0x11/0x1b [ 2447.595991][ T4744] should_fail+0x23c/0x250 [ 2447.600407][ T4744] __alloc_pages+0x102/0x320 [ 2447.605008][ T4744] alloc_pages+0x382/0x3d0 [ 2447.609434][ T4744] __page_cache_alloc+0x4d/0xf0 [ 2447.614288][ T4744] page_cache_ra_unbounded+0x1be/0x430 [ 2447.619757][ T4744] ondemand_readahead+0x58c/0x7c0 [ 2447.624793][ T4744] page_cache_async_ra+0x17e/0x1a0 [ 2447.629904][ T4744] do_async_mmap_readahead+0x211/0x250 [ 2447.635426][ T4744] filemap_fault+0x106/0x9f0 [ 2447.640024][ T4744] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:16 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r5 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd_index=0x2, 0x3ff, &(0x7f0000000440)="62dddf9778af32f58aff1bb7633590083d4b0750e82c4d9b04ca4f5287ca9f35f1a2cdce23baa9e18da05f255351848ef175e8e98a06cd3c2bed706f52be19141bd2ea795a6acab1e8660ae78f123e7f28423ce1f809d1dd5021789924d3525d34b57b2b54c609c377215d2bd1ca82e258ca00832194a780ba4dc2b50121903cc4f82bef36b6ed7f0fa31bee464f8dc7c3c2ce9f7094ff1b79825b88ddfd39dd45f03b34b853", 0xa6, 0x2, 0x0, {0x0, r8}}, 0x6) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000924c2eb13aae45acf5d80ea70cb2b4c149e2935908a2066ea769fd76b9361c0bfef444acdb74becb519c6aa5b91e4909c5cccbe14dfe1bf19671bec44651be63f0f5af2919b537a5324cbba39ba6b09b15c07eb31e9ea4828f126fa42e6f855223724e289e38f6fcf919b4bcdc472d649042afb5d680906047af091fbcd996cc50a7532af673241fcbc7f46c9589cc364ce423ba91d548775ff56b69425041eed19a6814b9687757f98b760cbfda86a529fca1050ed99ea06d62a5ddfeeccb6ef6a2895997e96f46d20395341189bd6d", @ANYRES16=0x0, @ANYBLOB="040026bd7000ffdbdf250100000008000400640101010800f70179dbf9527dc900005262dce5050700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) 16:10:16 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {0x8, 0x6}, {}, {}, {}, {}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x0, r1}], {0x10, 0x2}}, 0x7c, 0x0) 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d8010000100000022bbd7000ffdbdf25ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e2000814e2100000200800032000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x20804}, 0x0) 16:10:16 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r3}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_setup(0x1c2c, &(0x7f0000000240)={0x0, 0x7fb5, 0x4, 0x0, 0x3b2, 0x0, r3}, &(0x7f00006d7000/0x2000)=nil, &(0x7f00006db000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000380)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r8, 0x0, &(0x7f00000003c0)="0be87312ef9cae5194b1fed4efec4416df72f771b2bd7663148099e9a0", 0x1d, 0x2, 0x1, {0x0, r9}}, 0x1f) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) [ 2447.646380][ T4744] ? cgroup_rstat_updated+0x34/0x100 [ 2447.651733][ T4744] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2447.657340][ T4744] handle_mm_fault+0xc81/0x1580 [ 2447.662190][ T4744] do_user_addr_fault+0x609/0xbe0 [ 2447.667218][ T4744] exc_page_fault+0x91/0x220 [ 2447.671809][ T4744] asm_exc_page_fault+0x1e/0x30 [ 2447.676738][ T4744] RIP: 0010:clear_user+0x60/0xa0 [ 2447.681684][ T4744] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2447.701301][ T4744] RSP: 0018:ffffc90003603bb8 EFLAGS: 00010202 [ 2447.707367][ T4744] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2447.715336][ T4744] RDX: ffffc9000f42d000 RSI: 00000000000017e0 RDI: 0000000020018000 [ 2447.723311][ T4744] RBP: ffffc90003603e58 R08: ffffffff819810e6 R09: 0001c90003603e57 [ 2447.731344][ T4744] R10: 0000000000000004 R11: ffff88812acec080 R12: 0000000020018380 [ 2447.739342][ T4744] R13: 0000000000001000 R14: 0000000020017380 R15: 00007ffffffff000 [ 2447.747315][ T4744] ? clear_user+0x36/0xa0 [ 2447.751685][ T4744] ? clear_user+0x48/0xa0 [ 2447.756020][ T4744] iov_iter_zero+0x11b/0xb20 [ 2447.760622][ T4744] ? should_fail+0xd6/0x250 [ 2447.765129][ T4744] read_iter_zero+0x63/0x180 [ 2447.769741][ T4744] do_iter_readv_writev+0x2fb/0x380 [ 2447.774944][ T4744] do_iter_read+0x192/0x5d0 [ 2447.779448][ T4744] ? import_iovec+0x69/0x80 [ 2447.783948][ T4744] do_readv+0x171/0x2c0 [ 2447.788157][ T4744] ? vfs_write+0x61a/0x900 [ 2447.792575][ T4744] __x64_sys_readv+0x41/0x50 [ 2447.797162][ T4744] do_syscall_64+0x44/0xa0 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@getsa={0x384, 0x12, 0x4a7bea0c14fbccd5, 0x70bd2b, 0x25dfdbfd, {@in=@remote, 0x4d5, 0x2, 0x2b}, [@tmpl={0x144, 0x5, [{{@in6=@local, 0x4d3, 0xff}, 0xa, @in6=@local, 0x0, 0x0, 0x2, 0x2, 0x2, 0x5, 0x8}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x1, 0x1, 0x2, 0x4, 0x4, 0x9}, {{@in=@loopback, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x3, 0x200, 0x3, 0xb1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x0, 0x2, 0x0, 0x4, 0x9, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x0, 0x2, 0xc4, 0x1000, 0xfff, 0x3}]}, @algo_comp={0xa6, 0x3, {{'lzs\x00'}, 0x2f0, "0c91bd2395a5a2c8ddcccd95f6e29d19c1fe83bb0771c321298634e775811e9215502a050ce313518a19016a115b77f124d87a479fcdc8a201807e5445f6d676f506e4b597b518b7fec8b3e27226abbcca0120b2bcfff7fb2dbd88f309d3"}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x102, 0x1, {{'md5\x00'}, 0x5d0, "c6c3e979c1d21e15cba487b5d0804f97f9dfc4c5b3f9aa2d8b42e10c8039ab41cabeb8a971f35580c0fcff67e800609ff0680fae7e6f4386f80b244175d2ed8110a179048cfce24069151db4cd6dd105d0671105c8df539c0a5b787c74b7876021c19b13d30eb8355cb79a2e3447532c57efeb875b918b89bc11f54b3ed6297aaa0cb0dab61f1fa624ea68861454224dd3c7c98e87fd8f04b57b91b9f779577e92dc75e88125364932621c375916651d6cea6cef87ef37d310b9"}}, @lifetime_val={0x24, 0x9, {0x8, 0x2, 0x10001, 0x3}}]}, 0x384}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c801) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) [ 2447.801587][ T4744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2447.807554][ T4744] RIP: 0033:0x7f4fc1ace709 [ 2447.811967][ T4744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.832269][ T4744] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2447.840680][ T4744] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2447.848653][ T4744] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2447.856621][ T4744] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.864591][ T4744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.872562][ T4744] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:16 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 34) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:16 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x20000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:16 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:16 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0xfffffefc, 0x63}, &(0x7f00000d8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x12345}, 0x1000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r4, r3, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x1, &(0x7f0000000400)="0f67146a2fc4762db72d7c961a3f545c1292818c110f752099ebf7abecfd0c39a3c865206fb85a9c2c3287358fd2fcc2b2fa537e870073827bb4fe69fc81f8f4a91db38fbe567b695c31a0e260591a5ae5427642f03e84ee705306289b87e927ec73923a3f3f70dcfb16c21b3fea08f7e67aa2baa9b257aa61b2626a2ef79fbff0d5334726c17954863bd2e714feb7bc27f2d87eb077b08997c31144e46f56d72e219d9256bea0e3390e4c310595b04fb251eaefbe444a54e546022657a546609c58efaeaa2d6f32b0a63ecd46b9c9f39abfa0b058617c597c1c4540b547c558", 0x5, 0x0, 0x0, {0x2}}, 0x9) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000240)=@caif, 0x0, 0x0, 0x1}, 0x81) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'aegis256\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16:10:16 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00000dc000/0x1000)=nil, 0x1000, 0x1000003, 0x20010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x40, 0x1, &(0x7f0000000480)="db1dbd9f5d0e99e738b282191b5c4e65d6dd4a902474361c04d90c8a236a33d58f1660afd8c26ebabd7d08da3ff2cca4ddbd5306efacb5ef37711a8d6a2a9f1bc00002d76c008cab0824f3f06a70e580c6ceac51da41608ac0d8ae450746a22fea6fb55a14c87483b440f4d61794619feb01192c1dc9eeb0697148b1d1fb2897bb0a4ef8712a70198e52a3b5d5b5e01bf9528abfffd6bc4b09f7670cf5560e8d1032a0daef6ebc13050aa0bf5efdfe77ef7f2525f22ac5b3ab651f3a3d372aa1a445a54e76597f928b7dad13916ffe16d49cec7b73b4b40fedbaee531ae797066b", 0x3, 0x0, 0x1, {0x2}}, 0x20) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000000f00)={&(0x7f00000006c0)=@nfc={0x27, 0x1, 0x1}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)="f6da770e66071541071459743dd4b1fdebb35543cae6adec510a1efc4a8d3a1034f7407ba0a7fb2f91e621986f57c0dfc1798862d9e8b5d1d3d4a07837ee4930fb1094f1619437f61c7aa597a9e8317f55497e61956eea7b5e4b1378de97dbe0e6085426c5f5bc4ab964f4b3c212df4cfd20e73688b4c8ee64ff3c0b7281ad3d82cd31c12b68422834eebc92d073ce0bde00b8f68c9678d01b7507076097cd7bd9c69f8d467b6e6130711c47997bd94105ad756680025084c3e5b1c574e950281a1ecbb9f8e5678d136ca446c5158fc3350f0e2aa5a585434bb25f5cc847ba5048ae1012a6faae", 0xe7}, {&(0x7f0000000840)="a1a2295737397756a50479ae39cc5ab65b65fa68d67f21a5926ac2f74ff8f268fd4e150be5fc91022c8069262804b504d334634b6e3dd9b35d8944a96469decbbe4369d7562a4c8924d12f151cacb5fbc446f864c8174cbb278c8723bdf6a03b181fce2c31f4ed4ada4c2e726c92783e2868941ba5d896a49a27aac6e0d8b2ada9bd0ee631ac56fc7ef5263fad027b0d3456756b24876065ef1b0fb7428ee7de8b519cb0c838dd442a99fbbf6d69800830840541c774717aea5e5f5ff61e02403df892d9393a99128e63e364fee7caf888626ac107fdaa0ea1fc3b4c6db8ca", 0xdf}], 0x2, &(0x7f0000000980)=[{0x108, 0x112, 0x8a1b, "88b751c07e60cd417560436ae29c3505866aa776e47ed962836d45daec933c4a90d0bf9766cf33d0fcf591496dfd5d1e8a18f187a13eafdadc157cf20d9e2e965679a4fb229dcb3c155f6bb8b96a544fa43bd1e246597d06aa5542f08859843972a969f56082066c6c24d3c75f772b1e1b27909fab06eb77895512589a77230056b4bb971328ce6459415443b474a7d1b3653d4618918cece8640e58b231e3d0aaf34b49f666a497781e9d216f3ee99ca6a4ad364ae600e9c7c904c58916628857c240e6e1c44971358c2d32b68ae326a0d96c37c01dbeefdc80cc4ada556916b81c906eba2042ee395458a0aeb74cbeac4a754a"}, {0xe8, 0x102, 0x2, "b7078f862deafb22483d2f41f7332fb4c1c087582b1fcc5c61853701f7bb3afd123c0de60274f2be4578f0cae9b33b1d045991294b99d86b7ca9367cf7e1cd31e30ee3ff0142afbb5d7b93d5fae37f210ad3dd1c8e34be57adda67ba05f1fc051db4ab6c838b338e078d185050f1efe63826db9c01a12fd7d8ab71e5d20d93ba2e8783168f671fcdac7ee24c4c62508ce0204e6bbfa193a52afbe5c2677c486a787a0617b1ab84f145e9752c0e72c190fca11314caa17343f0c869a834b9cd243aaee39e08764e97a127764fedc2bc2951"}, {0xd0, 0x115, 0x1, "63ff9ac52ec90c8e34f4121057c258168646ac238c0312d4c602c21a101cc0e3609306a229c5801522b69ad26e6a0cae54e1f39222b043592b36f522d86673d62b01659cafbdf1448d9af2933dd64be49760eeda3c3d50359fbf3bae8bd0d3dcd32fe79b06168cbbfcea529683791ea572c9649998b4f6bb20bda0bdbc2a730a84dc7ab78315928a2edc0c958c98223aab24e78e320ba31e52e3670a0cf18bfb5e2b3d842c31c8f69b33677062a8d5a0022e400af1d8b89f759d30a5ce"}, {0x108, 0x114, 0xc2, "66e13f5fe1405b517b21e79cb91db6d8f9f70401f8ef3fb81d97cb45ca6f4a7c092b247ab05ced3d6f9330f94256d5743eb47d3a0f2b7d88a78739df2aa82f63bd029aa933686511a7b30e6c007c72cb7b0da49c43aabc24def8de065dae061f0ff928bfa895de808102448cc66b24c3580180d25732d6b2196b09f5ab0705991117ba6c4a9cff045db8ef80d55dcbb1c55a10512cb3cbb1e13b434353f66cc60d795bf07a0a283573dd9fe7c5c2d73146f857b416bd4956770436519f437ce80ab8c206fa59b402b70b2f78439debb54da869f612d02432665ee5a06f188920c7d5265085e155e411675a8985c2f242340cd2"}, {0xc8, 0x10b, 0x7f, "a1b74dec024a3b5e8e42bd7b0a53005328282539ec3949fa604277260450658939642d860c8f113f8faa0c7e046ca60c4b1d3802fd262141c04a034e5f81c66c65db5d8129b8f177c9eaf81419007914ee0451a7c5a5182bcc8ef01d86e706932377ffffea86b8d6ca97a089dba770c2d1c0833c1888113d123a4f277f3aaa0a2d3aa79822facd81c374d5955b71522cf40bece5c99008fffe9e23e7b88c6492bfc4d5b1d2a94339115d04c8475627bc6e88288a78b15d"}, {0x30, 0x10d, 0x80, "66c2c1c4112b4a0a27e694f96fb3de2d912979d084b66754ba"}, {0x78, 0x11, 0x10001, "8420409b23f0a4b8495c7661f72461b485ccad6d711641bedc95cb904b0cb0511bfd7d9425e4bbdd75427509167554c03a08f941919ddd2f2f34beb2d20e74f41f48d0a932a86fb86da16e3977978b6f6acd2f38afcd62413fb38e9aabd2c723700055f4271821"}, {0x10, 0x18, 0x101}], 0x548}, 0x0, 0x4040, 0x1}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000580), &(0x7f0000000240)='./file0/file0\x00'}, 0x3) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2448.034396][ T4785] FAULT_INJECTION: forcing a failure. [ 2448.034396][ T4785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2448.047698][ T4785] CPU: 0 PID: 4785 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2448.057837][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.067886][ T4785] Call Trace: [ 2448.071166][ T4785] dump_stack_lvl+0xd6/0x122 [ 2448.075763][ T4785] dump_stack+0x11/0x1b [ 2448.079921][ T4785] should_fail+0x23c/0x250 16:10:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x1, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) [ 2448.084340][ T4785] __alloc_pages+0x102/0x320 [ 2448.088939][ T4785] alloc_pages+0x382/0x3d0 [ 2448.093360][ T4785] __page_cache_alloc+0x4d/0xf0 [ 2448.098210][ T4785] page_cache_ra_unbounded+0x1be/0x430 [ 2448.103672][ T4785] ondemand_readahead+0x58c/0x7c0 [ 2448.108697][ T4785] page_cache_async_ra+0x17e/0x1a0 [ 2448.113814][ T4785] do_async_mmap_readahead+0x211/0x250 [ 2448.119312][ T4785] filemap_fault+0x106/0x9f0 [ 2448.123908][ T4785] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:17 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r4, 0x0, 0x8000000000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000180)={0x3, 'hsr0\x00', {0xfffffff7}, 0x4}) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2448.130243][ T4785] ? cgroup_rstat_updated+0x34/0x100 [ 2448.135576][ T4785] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2448.141127][ T4785] handle_mm_fault+0xc81/0x1580 [ 2448.145984][ T4785] do_user_addr_fault+0x609/0xbe0 [ 2448.151011][ T4785] exc_page_fault+0x91/0x220 [ 2448.155598][ T4785] asm_exc_page_fault+0x1e/0x30 [ 2448.160451][ T4785] RIP: 0010:clear_user+0x60/0xa0 [ 2448.165391][ T4785] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a 16:10:17 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f00000db000/0x3000)=nil, 0x3000, 0x3000000, 0x50, r0, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r5, r7, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index=0x7, 0x0, &(0x7f0000000240)="0c683b3c6a6e9f92533717e7ecfa8d460fad5210f1261b7c7f6332f9c190fef812e17a23ecb617329a2357fe91675a1300134cf6db63cfebca18b8b711e8bca5808d71326a3b61fadb8ab08368bbae8c474e5b31dd3bb3564847398f8fb8cb1b3c5711c15df87471", 0x68, 0x0, 0x1}, 0x7) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2448.185103][ T4785] RSP: 0018:ffffc9000371fbb8 EFLAGS: 00010202 [ 2448.191172][ T4785] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2448.199138][ T4785] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2448.207176][ T4785] RBP: ffffc9000371fe58 R08: ffffffff819810e6 R09: 0001c9000371fe57 [ 2448.215147][ T4785] R10: 0000000000000004 R11: ffff8881528ff040 R12: 0000000020020380 [ 2448.223119][ T4785] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2448.231090][ T4785] ? clear_user+0x36/0xa0 16:10:17 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0xa205, 0x8}, &(0x7f00000dc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x19, 0x4}, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000600)=0x3, 0x4) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/13, 0xd}}], 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r5, &(0x7f0000001040)="8c", 0x1, 0x0, &(0x7f00000011c0)=@can={0x1d, r6}, 0x80) syz_io_uring_submit(r1, 0x0, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/vlan/config\x00') [ 2448.235431][ T4785] ? clear_user+0x48/0xa0 [ 2448.239887][ T4785] iov_iter_zero+0x11b/0xb20 [ 2448.244480][ T4785] ? should_fail+0xd6/0x250 [ 2448.248983][ T4785] read_iter_zero+0x63/0x180 [ 2448.253594][ T4785] do_iter_readv_writev+0x2fb/0x380 [ 2448.259128][ T4785] do_iter_read+0x192/0x5d0 [ 2448.263635][ T4785] ? import_iovec+0x69/0x80 [ 2448.268159][ T4785] do_readv+0x171/0x2c0 [ 2448.272386][ T4785] ? vfs_write+0x61a/0x900 [ 2448.276800][ T4785] __x64_sys_readv+0x41/0x50 [ 2448.281393][ T4785] do_syscall_64+0x44/0xa0 16:10:17 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) recvfrom(r0, &(0x7f0000000300)=""/240, 0xf0, 0x2, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) [ 2448.285847][ T4785] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2448.291796][ T4785] RIP: 0033:0x7f4fc1ace709 [ 2448.296206][ T4785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.315850][ T4785] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2448.324313][ T4785] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:17 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = dup2(r3, r3) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2448.332280][ T4785] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2448.340244][ T4785] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.348200][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.356170][ T4785] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x0, 0x9, 0x2, 0x68ac}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) 16:10:17 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x20001000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:17 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x501000, 0x80, 0x10}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x401) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0xfffffff9, 0x4, 0x1, {0x0, r5, r6}}, 0x401) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:17 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 35) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:17 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="19f5bb4ffdba0c8b994ec95ff33899d25351ff437b638332e9de246578067604ee380004bcaf40502da19947b238072da204784f212ca9f4a383815378d5cb3f922f6be8156873fcb190d1d5619ee5d643a7557b47e41188b85b144bf0f55b86b482794dc042c8bd0253b61038559f74660e714a32c83b80938f7a956711a958c574", 0x82, 0x6}, {&(0x7f0000000200)="8021e188b73d40f32a0a52f635c6342bd342e20190d79cc17afb0aa6585b2e5f58524fb02cc1040e53acb725bd4819f1d93baea8bd92ffb0e9baa4242a9850fe20359af0aadaca", 0x47, 0x2}, {&(0x7f0000000480)="72202c61cfd2cd0b1ce131db8d8dd160b59c3041513b3047db5e2887e9c5df9b46b6f6a0b2bdada71bd8aeddc5e341f70231b0df1960c082deb138a3c25d55ac7cee1a4bf637ad7ef82808972fe17414353a4e575429c55a682ea06eb5143246908836b1d396a0e28cd5232b909d771b263ccbd2e585b9b23e3fe2", 0x7b, 0x7}, {&(0x7f0000000140)="76a01a6246d64c", 0x7, 0xbc}], 0x1000, &(0x7f0000001600)={[{@fat=@umask={'umask', 0x3d, 0x6}}, {@fat=@fmask={'fmask', 0x3d, 0x6}}], [{@smackfsfloor}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@audit}, {@uid_lt={'uid<', r3}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@dont_measure}]}) setregid(0x0, r4) lchown(&(0x7f0000000000)='./file0\x00', r1, r4) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:17 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x5}, 0xb305c9b) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:17 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58010000100013070000000000000000ff020000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) [ 2448.579397][ T4839] FAULT_INJECTION: forcing a failure. [ 2448.579397][ T4839] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.592007][ T4839] CPU: 1 PID: 4839 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2448.602066][ T4839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.612113][ T4839] Call Trace: [ 2448.615459][ T4839] dump_stack_lvl+0xd6/0x122 [ 2448.620073][ T4839] dump_stack+0x11/0x1b [ 2448.624224][ T4839] should_fail+0x23c/0x250 [ 2448.628626][ T4839] ? xas_create+0x3fb/0xb30 [ 2448.633120][ T4839] __should_failslab+0x81/0x90 [ 2448.637870][ T4839] should_failslab+0x5/0x20 [ 2448.642369][ T4839] kmem_cache_alloc+0x4f/0x300 [ 2448.647122][ T4839] xas_create+0x3fb/0xb30 [ 2448.651449][ T4839] xas_store+0x70/0xca0 [ 2448.655599][ T4839] ? memcg_check_events+0x23/0x3b0 [ 2448.660712][ T4839] ? get_page_from_freelist+0x55e/0x830 [ 2448.666301][ T4839] ? cgroup_rstat_updated+0x34/0x100 [ 2448.671633][ T4839] ? xas_find_conflict+0x422/0x4c0 [ 2448.676771][ T4839] __add_to_page_cache_locked+0x20b/0x4f0 [ 2448.682497][ T4839] ? workingset_activation+0x270/0x270 [ 2448.687962][ T4839] add_to_page_cache_lru+0xa0/0x1b0 [ 2448.693169][ T4839] page_cache_ra_unbounded+0x274/0x430 [ 2448.698627][ T4839] ondemand_readahead+0x58c/0x7c0 [ 2448.703648][ T4839] page_cache_async_ra+0x17e/0x1a0 [ 2448.708864][ T4839] do_async_mmap_readahead+0x211/0x250 [ 2448.714399][ T4839] filemap_fault+0x106/0x9f0 [ 2448.719029][ T4839] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2448.725355][ T4839] ? cgroup_rstat_updated+0x34/0x100 [ 2448.730671][ T4839] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2448.736259][ T4839] handle_mm_fault+0xc81/0x1580 [ 2448.741112][ T4839] do_user_addr_fault+0x609/0xbe0 [ 2448.746133][ T4839] exc_page_fault+0x91/0x220 [ 2448.750786][ T4839] asm_exc_page_fault+0x1e/0x30 [ 2448.755645][ T4839] RIP: 0010:clear_user+0x60/0xa0 [ 2448.760574][ T4839] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a 16:10:17 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x3, 0x1a6}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x5f13, &(0x7f0000000280)={0x0, 0x1f06, 0x10, 0x2, 0x6d, 0x0, r3}, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000300)) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:17 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x80010, r0, 0x0) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r5, r4, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000240)=@caif=@dbg={0x25, 0x0, 0x80}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x8) [ 2448.780178][ T4839] RSP: 0018:ffffc900038c7bb8 EFLAGS: 00010202 [ 2448.786239][ T4839] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2448.794206][ T4839] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2448.802234][ T4839] RBP: ffffc900038c7e58 R08: ffffffff819810e6 R09: 0001c900038c7e57 [ 2448.810204][ T4839] R10: 0000000000000004 R11: ffff888150aac040 R12: 0000000020020380 [ 2448.818164][ T4839] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2448.826160][ T4839] ? clear_user+0x36/0xa0 16:10:17 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0xcaf, 0x0, 0xffffffffffffffef, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:17 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x51) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2448.830489][ T4839] ? clear_user+0x48/0xa0 [ 2448.834814][ T4839] iov_iter_zero+0x11b/0xb20 [ 2448.839473][ T4839] ? should_fail+0xd6/0x250 [ 2448.843975][ T4839] read_iter_zero+0x63/0x180 [ 2448.848668][ T4839] do_iter_readv_writev+0x2fb/0x380 [ 2448.853874][ T4839] do_iter_read+0x192/0x5d0 [ 2448.858376][ T4839] ? import_iovec+0x69/0x80 [ 2448.862889][ T4839] do_readv+0x171/0x2c0 [ 2448.867118][ T4839] ? vfs_write+0x61a/0x900 [ 2448.871580][ T4839] __x64_sys_readv+0x41/0x50 [ 2448.876171][ T4839] do_syscall_64+0x44/0xa0 [ 2448.880638][ T4839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2448.886652][ T4839] RIP: 0033:0x7f4fc1ace709 [ 2448.891055][ T4839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.910751][ T4839] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2448.919167][ T4839] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:17 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000240)=""/34, 0x22, 0x1, &(0x7f0000000280)={0x77359400}) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x11, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@report={0x54, 0x20, 0x4, 0x70bd2c, 0x25dfdbfd, {0x33, {@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@broadcast, 0x4e20, 0x1, 0x4e23, 0x0, 0x2, 0x80, 0x40, 0x3a, r3, 0xffffffffffffffff}}, [@XFRMA_IF_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) [ 2448.927130][ T4839] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2448.935107][ T4839] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.943086][ T4839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.951054][ T4839] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:18 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x21000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:18 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400af0000000080000c000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0ff7fffffffffffc20"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x4, 0xee00}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, 0xee01}, {0x2, 0x2}], {0x4, 0x6}, [{0x8, 0x4, 0xee01}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r1}], {}, {0x20, 0x4}}, 0x5c, 0x1) 16:10:18 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x6786, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0xca, 0x20000, 0x12345}, 0xf580) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2b3) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f00000001c0)="2e214def72ac3d144b72eb7fe0a6512af8e1862d133448f6ac536966bf05718cc1eb84bd1512109f90b6a1ccd7599116c89a33c5798cc10a7b84bfb0e6635ee2ccb2bc407104fa0c67", 0x49}, {&(0x7f0000000240)="6ada2f807eef07f62e1cd510157bebbcc41d9c63f7a0616c31613d1649c135d3abc33dbdbc271f2d6540ee791fb7c0e8089d33352d4156602c378ca55d1a1163eded46252009c71d206b30c3533e9814f02f15308e938e7be31a92dc203631696e44b28cab419c420c24cf04eb695f8bfe2489fa209b618dee875407b9c83cfe828f18f4a76ca0298a2b6273e0e6415cff29a59c196cb3aa7a3b7d86f5ebdea928707b2941147e5696794d0391ccbf4e23fd6e18654717a4cb34e48fca3e974fd87d4f608399343bd4afbe31960e6486bb2a5331bd32fee69a868cc712c775f79ef94a4a0920a270c7822830", 0xec}, {&(0x7f0000000340)="7df9eab753e6d8928b97bfab93e0b9c2734701e3f9eaac0386b6e16d7ab734bf18a48a1d31ef828fb616d393897aaf56eee193faae95c67e51d9d3e9959ee7b61cdf8dda52d89a50cd4cdccaf85e22e15d6bfbc063bccc2b6acf653cd1c243856596aa926331761870c68b4fb22b81d7572a86d891193b51c365ed9884ef81b6b960c90eb8b0aa2551377fbdd98109d109d7c6554653b3ce3186cfa01545f4f2a1cf5e81b5aa09a7a084cf9c877a2082ad689b1f29e1a9b0fa8a238f17971101c9707322f97b317f39eaf0c84b95b56887f7f47a3e6756938428cd8142828d8eeb6e2d060361b6481867eae8", 0xec}, {&(0x7f0000000440)="e1f4c72120f0f79f162bc8f57f1b618633fc86f53493e3d1a763edf59226dd08f9778f4f1374e6e50176", 0x2a}, {&(0x7f00000004c0)="95f8f5d663cd194a111b379b7633f4f6b8eda2b49fbff5b4161376afa3eb5fc940dce31616f45220bb991a849364e973794b3fb38e7571a4a3ec0c5fca5a0ee6467c1ed2c7c0cadd8d16780d9d6eca71a401f530f03fc62b1052386d478d9c9b642e163d9c74c6e9d0327aa78225a304e1452455617c9e87cbdfcfd88b9226f9dd9042f1d9a70bfb8388aa13fb681275fe2f5758df8f1584a2be7127c70bb493efc5133573dd7dccadbd702493141c00af4ec97b6f0e2200ce3a18748c5ebaf4b4b4f44067ab81ef9adac8e4810b7cd43b0bbf8b117a8621ad6f02e0d244ca5dc85a54", 0xe3}, {&(0x7f00000005c0)="6dbd395daa499066467c740640305c6d011f76a862283edd3bf923f29c", 0x1d}, {&(0x7f0000000600)="fd6778bcfd89cdaa0971aed49045aee01d79ceaa4f737026f2258cc651286fca12267249115c4a297726dc0851dbb40f3f9d2adb3c8a4b168d1a325138bcac782cc58a7b7f97f78905a1c6ff3f9119c8a3c3c83919ffc47fdc4529d8c00dd47a5df81a93e2ef831a2125161384051f306e747f97", 0x74}], 0x7, 0x1, 0x8, 0x1b) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 16:10:18 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x20, 0x4000, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x200000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c152c6f21aa38356800e4056a61ad25c5403a8257c1bfd66fd10e5779dbeb2bdc9ec1d3cdcdf586000000000000000000000000000000000000000040637410927cd814ae5e03aa8212b8bb228b18f881036d216b67e06df6a28c6ad442f4cc3d1802d9840b72fb8a8b14d6b94f4209b1c067e3d5b55fd96a"], 0x1c}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1000) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:18 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 36) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2449.164849][ T4889] FAULT_INJECTION: forcing a failure. [ 2449.164849][ T4889] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.177547][ T4889] CPU: 1 PID: 4889 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2449.187604][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.197661][ T4889] Call Trace: [ 2449.201043][ T4889] dump_stack_lvl+0xd6/0x122 [ 2449.205728][ T4889] dump_stack+0x11/0x1b [ 2449.209885][ T4889] should_fail+0x23c/0x250 [ 2449.214293][ T4889] ? xas_create+0x96b/0xb30 [ 2449.218876][ T4889] __should_failslab+0x81/0x90 [ 2449.223640][ T4889] should_failslab+0x5/0x20 [ 2449.228192][ T4889] kmem_cache_alloc+0x4f/0x300 [ 2449.232957][ T4889] ? xas_create+0x3fb/0xb30 [ 2449.237508][ T4889] xas_create+0x96b/0xb30 [ 2449.241881][ T4889] xas_store+0x70/0xca0 [ 2449.246117][ T4889] ? memcg_check_events+0x23/0x3b0 [ 2449.251236][ T4889] ? get_page_from_freelist+0x55e/0x830 [ 2449.256876][ T4889] ? cgroup_rstat_updated+0x34/0x100 [ 2449.262165][ T4889] ? xas_find_conflict+0x422/0x4c0 [ 2449.267354][ T4889] __add_to_page_cache_locked+0x20b/0x4f0 [ 2449.273078][ T4889] ? workingset_activation+0x270/0x270 [ 2449.278544][ T4889] add_to_page_cache_lru+0xa0/0x1b0 [ 2449.283747][ T4889] page_cache_ra_unbounded+0x274/0x430 [ 2449.289270][ T4889] ondemand_readahead+0x58c/0x7c0 [ 2449.294304][ T4889] page_cache_async_ra+0x17e/0x1a0 [ 2449.299495][ T4889] do_async_mmap_readahead+0x211/0x250 [ 2449.305021][ T4889] filemap_fault+0x106/0x9f0 16:10:18 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r5, 0x0, &(0x7f0000000180)='./file0\x00', 0x12, 0x125000, 0x12345}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2449.309715][ T4889] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2449.316041][ T4889] ? cgroup_rstat_updated+0x34/0x100 [ 2449.321333][ T4889] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2449.326890][ T4889] handle_mm_fault+0xc81/0x1580 [ 2449.331742][ T4889] do_user_addr_fault+0x609/0xbe0 [ 2449.336764][ T4889] exc_page_fault+0x91/0x220 [ 2449.341346][ T4889] asm_exc_page_fault+0x1e/0x30 [ 2449.346202][ T4889] RIP: 0010:clear_user+0x60/0xa0 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@allocspi={0x380, 0x16, 0x400, 0x70bd2a, 0x25dfdbfb, {{{@in=@local, @in=@rand_addr=0x64010101, 0x4e20, 0x0, 0x4e24, 0x6e, 0x2, 0x20, 0x60, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d3, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0x1, 0x9, 0x80000001, 0x3, 0x8, 0x7, 0x2, 0xd}, {0x7ff, 0x6, 0x4, 0x4e4b}, {0x10001, 0xdf, 0x800}, 0x70bd29, 0x3503, 0xa, 0x1, 0x3, 0x80}}, [@tmpl={0x144, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x33}, 0xa, @in=@local, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0xfffffff9, 0x3}, {{@in6=@local, 0x4d6, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x3, 0x1, 0x9, 0x65, 0x4, 0xffffff00}, {{@in=@loopback, 0x4d5, 0x33}, 0xa, @in6=@loopback, 0x3, 0x3, 0x0, 0xa6, 0x3, 0x4, 0xff}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x4d5, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x3503, 0x1, 0x1, 0x4, 0x8, 0x45dd09bc}, {{@in=@loopback, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010100, 0x3503, 0x1, 0x1, 0xf9, 0x400, 0x4, 0xe0}]}, @tfcpad={0x8, 0x16, 0x2}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast2, 0x0, 0xa}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010102, 0x4e24, 0x4, 0x4e23, 0x446e, 0xa, 0x0, 0x80, 0x16, 0x0, 0xee01}, {0x4, 0x3, 0x4, 0x18000000000000, 0x2, 0x10001, 0x6, 0x3}, {0x1a77, 0x7, 0xffff, 0x1f}, 0x5, 0x6e6bb2, 0x0, 0x0, 0x1, 0x1}}, @sec_ctx={0x47, 0x8, {0x43, 0x8, 0x1, 0x3, 0x3b, "64f49ae8e583fc1f320593d7926f082b842fe39d5d0f7ce0ef6b9c4e8a49fc0f0f28205a3f75aea519e9f637a995177d567a04147d744cbec388b3"}}, @mark={0xc, 0x15, {0x35075d, 0xdd}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @extra_flags={0x8, 0x18, 0x3}]}, 0x380}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) [ 2449.351140][ T4889] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2449.370753][ T4889] RSP: 0018:ffffc90003a17bb8 EFLAGS: 00010202 [ 2449.376815][ T4889] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2449.384783][ T4889] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2449.392751][ T4889] RBP: ffffc90003a17e58 R08: ffffffff819810e6 R09: 0001c90003a17e57 [ 2449.400715][ T4889] R10: 0000000000000004 R11: ffff888150a98080 R12: 0000000020020380 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x400c801) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000002c0)) [ 2449.408676][ T4889] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2449.416676][ T4889] ? clear_user+0x36/0xa0 [ 2449.421026][ T4889] ? clear_user+0x48/0xa0 [ 2449.425354][ T4889] iov_iter_zero+0x11b/0xb20 [ 2449.430047][ T4889] ? should_fail+0xd6/0x250 [ 2449.434550][ T4889] read_iter_zero+0x63/0x180 [ 2449.439288][ T4889] do_iter_readv_writev+0x2fb/0x380 [ 2449.444508][ T4889] do_iter_read+0x192/0x5d0 [ 2449.449025][ T4889] ? import_iovec+0x69/0x80 [ 2449.453544][ T4889] do_readv+0x171/0x2c0 [ 2449.457706][ T4889] ? vfs_write+0x61a/0x900 16:10:18 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r3, 0x10000000) r8 = syz_open_dev$vcsu(&(0x7f0000000180), 0x80000000, 0x224102) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2003ab18db8f196d, 0x0, r8, &(0x7f0000000240)={0x40000000}, r9, 0x3, 0x0, 0x0, {0x0, r10}}, 0x9a000) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2449.462133][ T4889] __x64_sys_readv+0x41/0x50 [ 2449.466748][ T4889] do_syscall_64+0x44/0xa0 [ 2449.471185][ T4889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2449.477087][ T4889] RIP: 0033:0x7f4fc1ace709 [ 2449.481543][ T4889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.501157][ T4889] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="58010000100013070000000000000000ff020000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:10:18 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000000)="23614f1f14a7cb46d381ec547a3ca2971c723ab3582710846c9ab883910c6f98bd75886edc88143ac26ab328eddc99645868d63b", 0x34, 0xe0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) [ 2449.509580][ T4889] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2449.517553][ T4889] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2449.525524][ T4889] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2449.533495][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2449.541463][ T4889] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:18 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x22000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:18 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x4000000}, 0x8) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x100, 0x2, &(0x7f00000007c0)="7c23280f8e84b738c243d35a4ae86388c6b95a7121573bb8af79eae8103d5e7898a27cc4a28c79ec5c56f8c9c09eeac2f8fd0d166822fdfeb9eab8f1281a44340f5c7cb829de48a277a4c2", 0x1000, 0x0, 0x0, {0x2}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000900)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0x4, 0x0, 0x0, 0x1}, 0x7fffffff) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000780)={0x0, &(0x7f0000000440)}) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x1000)=nil, 0x1000, 0x3000001, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f00000008c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r5, 0x80, &(0x7f0000000840)=@sco, 0x0, 0x0, 0x1}, 0xffffffbb) 16:10:18 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:18 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="02000000", @ANYBLOB="266e30f45bf767b6ec73fe4fe3f8c47701d5272ccf8f2fc884c2bfd441533084af7e8b68ccc22972daae50c4", @ANYBLOB="08010000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="174d3437000080000899a100", @ANYBLOB="20b5f2782ef7501b6e6b9b8b845aa015c1c188ac3e223bd71225724d0587af4d4c8b1eef7ba52700afefbb4a971f181c13ef508ad05abb515d8822f8ffdf9517b535002f39d4cadef42edddd2f68d08ce11c5adf2fce5ca8e78f95916f4f7826128bf3d2a3606c21b0ebdac1bded1f94c024c80130016bbfb74ddf52fe2fd571982a2f5ef68d2d915ea7d64da10ae09900eca2d0181ef0880e367d33eb60fadd7b74efbe44800d16d7df73f24228c0", @ANYBLOB='\b\x00\x00\x00', @ANYRES16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000eb3bf5f008f5915cfc000100"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) 16:10:18 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 37) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2449.734907][ T4949] FAULT_INJECTION: forcing a failure. [ 2449.734907][ T4949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2449.748273][ T4949] CPU: 1 PID: 4949 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2449.758390][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.768448][ T4949] Call Trace: [ 2449.771721][ T4949] dump_stack_lvl+0xd6/0x122 [ 2449.776309][ T4949] dump_stack+0x11/0x1b [ 2449.780461][ T4949] should_fail+0x23c/0x250 [ 2449.784870][ T4949] __alloc_pages+0x102/0x320 [ 2449.789457][ T4949] alloc_pages+0x382/0x3d0 [ 2449.793874][ T4949] __page_cache_alloc+0x4d/0xf0 [ 2449.798766][ T4949] page_cache_ra_unbounded+0x1be/0x430 [ 2449.804302][ T4949] ondemand_readahead+0x58c/0x7c0 [ 2449.809333][ T4949] page_cache_async_ra+0x17e/0x1a0 [ 2449.814485][ T4949] do_async_mmap_readahead+0x211/0x250 [ 2449.819941][ T4949] filemap_fault+0x106/0x9f0 [ 2449.824526][ T4949] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd25, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@multicast2, {}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0x3f, 0x2, @private0, @mcast2, 0x1, 0x10, 0x8, 0x7fff}}) 16:10:18 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) quotactl(0x2, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)="df") lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:18 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f00006d4000/0x4000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0xfc0, 0xe57, 0x0, &(0x7f0000000240)={[0xf7]}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], 0x4) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) mmap(&(0x7f00000dc000/0x4000)=nil, 0x4000, 0x4, 0x10, r7, 0x5d3dd000) [ 2449.830875][ T4949] ? cgroup_rstat_updated+0x34/0x100 [ 2449.836236][ T4949] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2449.841784][ T4949] handle_mm_fault+0xc81/0x1580 [ 2449.846633][ T4949] do_user_addr_fault+0x609/0xbe0 [ 2449.851650][ T4949] exc_page_fault+0x91/0x220 [ 2449.856307][ T4949] asm_exc_page_fault+0x1e/0x30 [ 2449.861162][ T4949] RIP: 0010:clear_user+0x60/0xa0 [ 2449.866091][ T4949] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2449.885756][ T4949] RSP: 0018:ffffc90003c07bb8 EFLAGS: 00010202 [ 2449.891819][ T4949] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2449.899859][ T4949] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2449.907824][ T4949] RBP: ffffc90003c07e58 R08: ffffffff819810e6 R09: 0001c90003c07e57 [ 2449.915794][ T4949] R10: 0000000000000004 R11: ffff88814d76c040 R12: 0000000020020380 [ 2449.923759][ T4949] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2449.931721][ T4949] ? clear_user+0x36/0xa0 16:10:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000014c0)=""/235, 0xeb}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x6}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x11, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000002940)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002900)={&(0x7f0000002600)=@updpolicy={0x2d4, 0x19, 0x400, 0x70bd27, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x8001, 0x4e23, 0xfff, 0x2, 0x0, 0x20, 0x84, r4, 0xffffffffffffffff}, {0xfffffffffffffffc, 0x100, 0x3, 0x1, 0x9, 0x66, 0x3, 0x3ff}, {0x8, 0x40, 0x8, 0x100000000}, 0xffffffc1, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, [@lastused={0xc, 0xf, 0x8}, @offload={0xc, 0x1c, {0x0, 0x4}}, @mark={0xc, 0x15, {0x35075a, 0x4}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @policy_type={0xa}, @sec_ctx={0x7a, 0x8, {0x76, 0x8, 0x1, 0x9, 0x6e, "af2421753a73b260964c937d9cf70d5963d59e104be042ac3061cf81e9e69d2f2209e04d4a7731edf874ed92f52ceb1b4f8a6c15614427d38698266aafb5dc0c057d33c819e40a62ae95ea4be95e7c01e5c4bdd0766a44d977c0801c3ed7c368be43092ad8ade99b9a5f3394585e"}}, @algo_comp={0xac, 0x3, {{'lzs\x00'}, 0x320, "cc2e698333f33331d7b9b12baf28932e2fa2b03609d12bced078026ad7fd26ee36ac9595a6a0e155d49a88efa298341ccdddf788f3e604401915576af5a65248f2aaa6409855100e9df77478d75a1c91c706b7a920422cb0270b5ef88ad3cc712be408de"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @tmpl={0x44, 0x5, [{{@in=@multicast1, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x3500, 0x4, 0x2, 0x7f, 0x2, 0x2, 0x1f}]}, @algo_comp={0x70, 0x3, {{'lzs\x00'}, 0x140, "8f5bc2c865f6963e900045763c823ec4723d5550d3167f74c829afc30594a5f4019bac58da0af08d"}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x80}, 0x40814) 16:10:18 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_setup(0xda4, &(0x7f0000000240)={0x0, 0x8afc, 0x20, 0x2, 0x25b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r9}}, 0xffffffff) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="8583deb12e51f3b5cb5dbe662d2adb90f32914f83e50345f9aff79c468c26efdc860f903ae9b5ba6e8be69fd6f4f73a789ff70244b8908fc05be77c30b64246b549461c7d8e4869585e233da3a694c2c3f370adb702a21eef7bf1dcf60b46e8baad31ac9c74a09ad71e4dcfcb4f99f0198fcfd95b519f59f3742a2775fea459a20ab480c751a95ac38a8042e99f38df5de3ea2b76e21df83ebdc380a289d4995aeaa7ec68648ac12aefc03b79dbe5788aff815", 0xb3, 0x80, 0x1}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000640)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x401) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2449.936050][ T4949] ? clear_user+0x48/0xa0 [ 2449.940373][ T4949] iov_iter_zero+0x11b/0xb20 [ 2449.944995][ T4949] ? should_fail+0xd6/0x250 [ 2449.949494][ T4949] read_iter_zero+0x63/0x180 [ 2449.954086][ T4949] do_iter_readv_writev+0x2fb/0x380 [ 2449.959336][ T4949] do_iter_read+0x192/0x5d0 [ 2449.963838][ T4949] ? import_iovec+0x69/0x80 [ 2449.968342][ T4949] do_readv+0x171/0x2c0 [ 2449.972497][ T4949] ? vfs_write+0x61a/0x900 [ 2449.976910][ T4949] __x64_sys_readv+0x41/0x50 [ 2449.981550][ T4949] do_syscall_64+0x44/0xa0 16:10:19 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r5 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0x2, 0x4c0c, &(0x7f0000000780)=[{&(0x7f00000003c0)="f91555b4e63cc8a356173a8c20f7d46a606bea14642c5744fe903f5b22776fce6443ab5c6e3e536fc90724034788dba6c05b5be18a9d947b2a43eb0d51fa73c4ad4279d93732f5c700cc41ebde8e676e0f4fcdf8b820fd67dbdfd6e9fff6b43aa0b05dac5891a45d25e13e4d3917d3e317aa8d85e440225b61f34c39fa8ea1313b21684990284fd2262f876aa11acc6f4e7fe12b9d32681feb118cba71c41482144460f8539bd71294dc0824fc9e9c7378a5109520303da0c76f4ca961", 0xbd}, {&(0x7f0000000240)="107da7efba46ed3f30cf2ce9f9790e332d58566ff5", 0x15}, {&(0x7f0000000480)="0adb68418a464e9d7d5ef2dc7c18bffdccd296c9167bbdd57a983bb7c76a766d7d7561120c2a936d2f6e679f4e4a6fe40d9cfe33d5915cb55328edede0ad6de8f7936663d31d799fb734a54f", 0x4c}, {&(0x7f0000000500)="2cb0c6e21f67223af35b56d4f1851a900396eedf01a97166b499f36e747747ef29811663428a26a544324d238e2bb22be37047e1a2f4661bda7b27f2c43b6b1077517468b77f3e5361a2a0122c9e383a5ac8504b11715e49c758405fcea888ec6bc71a140308e41b48b3227c40182644c50852fc6765f73a11bd7dcdd04f74a442467abff3be0bb9c97557260259c53fbe2907c5d0a96c4334903d0be8bcac4a14505a05dfe81519c6ab498afadde06d12ee0caeddc9d7929fbf442b39c7f33da17626fe", 0xc4}, {&(0x7f0000000600)="603eee9f0f400ba2a31934d70675dec45bbdb72c7343ad3f90b64681e22d0352a27730d47b7a12141f3958381c85bc2eb846cb16454ca0dab00fba31e5c9b2aa6e2db0449782ac1fc427e7bafab3358a92aac970b837d409a91e4ef84b0d5ffdb433c35001333fd960ffd6987d04cd21e49e5a880209cbf35581fbaad3029ac8d17c45653b57f093b00e0890cf8a2eee0cb8a54dfc816af1a70362ec54929a4d050a22b422e96c3d0317afb32766fe7ca8c98b", 0xb3}, {&(0x7f00000006c0)="720eee44924a3ddaf5cc6649608a7585f04cdc80221d64bfe972465979d3037e94fe2364a06755fee87d4f5bde1dc2ef28de08ac089d94ff6d894654e813921b232db29341757650f79547e01ea070c96b2f1328b303e070a2653674824f9862dbe3b438f63dfb02147a37d463c7c19374eae05725922a43246568b2f5d8c436c100545008842116ffcb62e69e22863acdde27bbeb23736f100147eb8ba220149b6c1c90fa7d84102ef25f0c4205277fa24b7626", 0xb4}], 0x6, 0xd, 0x0, {0x3, r8}}, 0x19) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2449.985966][ T4949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2449.991864][ T4949] RIP: 0033:0x7f4fc1ace709 [ 2449.996352][ T4949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.015961][ T4949] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2450.024379][ T4949] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2450.032351][ T4949] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2450.040319][ T4949] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.048287][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2450.056299][ T4949] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:19 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x23000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:19 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/76, 0x4c}], 0x1, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x38}, 0x21) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x6, 0xee00}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x2, 0x7}], {0x4, 0x2}, [{0x8, 0x7, r1}, {0x8, 0x2, 0xee01}, {0x8, 0x1, r3}, {0x8, 0x2, r5}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x6, 0xee01}], {0x10, 0x2}, {0x20, 0x1}}, 0x9c, 0x2) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) bind(r9, &(0x7f0000000200)=@generic={0x1d, "0c72114302b842ceba6c1ae005d5e0d264b8184b55cf882b7a01492342eb643f0c2119f8ae1605ad72af13d5d000cc99461901e52d23757f56c05c51b5c1e03702f73ba5d235fd71aaa8d5d789517085d0530573cb033089121a78dbadc1c4cbf40113a41286809e0f64af4f1f1e325ae232cb161eff92b0d225b236cd2c"}, 0x80) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:19 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x6c1e, 0x0, 0x1, 0x11a}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@isdn={0x22, 0x0, 0x81, 0x1, 0x81}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:19 executing program 0: r0 = syz_io_uring_setup(0x1aab, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x342}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5801000010001307000000000000000000000000000000000000ffffac1414aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) 16:10:19 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 38) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:19 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(0x0, r6, &(0x7f0000000840)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd=r0, 0x341, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/164, 0xa4}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x7, 0x8}, 0x441) r7 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x2) io_uring_enter(r7, 0x62f8, 0x90df, 0x1, &(0x7f0000000280)={[0x80]}, 0x8) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, 0x3, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c000}, 0x240008c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x11, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@newae={0x12c, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in6=@remote, 0x1f, 0x2, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x3503}, [@algo_auth={0xd0, 0x1, {{'blake2b-512-generic\x00'}, 0x440, "24ff8a5d23e3e18b3ab687a9d25414e1e89c0d44a7d7b23a6e6f8466cf3409a747b8394ec1bbb49e99eed36a81199f709c7d0520ddd416783823b25d7877b7eb02c1b14be6346e4fbbab7e02d6c378faeb3093a0f8f5bc2471eea7c6af2f689843c27d671e4822c8da5f728994169662504b4d342eb70143de01b2cdaaffb5dd3db7d405ce5c222d"}}, @XFRMA_IF_ID={0x8, 0x1f, r3}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) setsockopt$inet6_int(r5, 0x29, 0x34, &(0x7f00000001c0)=0x6, 0x4) sendfile(r4, r0, 0x0, 0x8) 16:10:19 executing program 5: pidfd_open(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x80, 0x20) 16:10:19 executing program 1: r0 = syz_io_uring_setup(0x495b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2000140}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0x3, 0x0, 0x4, 0x0, 0x1}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0\x00', 0x2, 0x0, 0x12345}, 0x40) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x100, 0x0}, 0x4) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x9a5d, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r6, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x1, {0x1}}, 0x101) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:19 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='v7\x00', 0x10000, &(0x7f0000000340)='/-)\x00') mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x8008, &(0x7f0000000140)='0!:};\'\x19\'{{W}{\x00') mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) [ 2450.297799][ T4999] FAULT_INJECTION: forcing a failure. [ 2450.297799][ T4999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2450.311072][ T4999] CPU: 1 PID: 4999 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2450.321130][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.331182][ T4999] Call Trace: [ 2450.334457][ T4999] dump_stack_lvl+0xd6/0x122 [ 2450.339056][ T4999] dump_stack+0x11/0x1b [ 2450.343205][ T4999] should_fail+0x23c/0x250 [ 2450.347619][ T4999] __alloc_pages+0x102/0x320 [ 2450.352209][ T4999] alloc_pages+0x382/0x3d0 [ 2450.356697][ T4999] __page_cache_alloc+0x4d/0xf0 [ 2450.361557][ T4999] page_cache_ra_unbounded+0x1be/0x430 [ 2450.367016][ T4999] ondemand_readahead+0x58c/0x7c0 [ 2450.372087][ T4999] page_cache_async_ra+0x17e/0x1a0 [ 2450.377191][ T4999] do_async_mmap_readahead+0x211/0x250 [ 2450.382726][ T4999] filemap_fault+0x106/0x9f0 [ 2450.387390][ T4999] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:19 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee6000/0x2000)=nil, 0x2000, 0x1000006, 0x110, r0, 0x8000000) syz_io_uring_setup(0xbaf, &(0x7f0000000240)={0x0, 0xe059, 0x10, 0x1, 0x1ba}, &(0x7f00000d8000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x82}}, 0x9) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2450.393720][ T4999] ? cgroup_rstat_updated+0x34/0x100 [ 2450.399028][ T4999] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2450.404634][ T4999] handle_mm_fault+0xc81/0x1580 [ 2450.409482][ T4999] do_user_addr_fault+0x609/0xbe0 [ 2450.414499][ T4999] exc_page_fault+0x91/0x220 [ 2450.419091][ T4999] asm_exc_page_fault+0x1e/0x30 [ 2450.423945][ T4999] RIP: 0010:clear_user+0x60/0xa0 [ 2450.428874][ T4999] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2450.448501][ T4999] RSP: 0018:ffffc90003ce7bb8 EFLAGS: 00010202 [ 2450.454561][ T4999] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2450.462528][ T4999] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2450.470506][ T4999] RBP: ffffc90003ce7e58 R08: ffffffff819810e6 R09: 0001c90003ce7e57 [ 2450.478479][ T4999] R10: 0000000000000004 R11: ffff88814d76c040 R12: 0000000020020380 [ 2450.486513][ T4999] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2450.494487][ T4999] ? clear_user+0x36/0xa0 [ 2450.498820][ T4999] ? clear_user+0x48/0xa0 [ 2450.503196][ T4999] iov_iter_zero+0x11b/0xb20 [ 2450.507787][ T4999] ? should_fail+0xd6/0x250 [ 2450.512289][ T4999] read_iter_zero+0x63/0x180 [ 2450.514038][ T5018] hugetlbfs: Unknown parameter '0!:};''{{W}{' [ 2450.516921][ T4999] do_iter_readv_writev+0x2fb/0x380 [ 2450.528258][ T4999] do_iter_read+0x192/0x5d0 [ 2450.532810][ T4999] ? import_iovec+0x69/0x80 [ 2450.537392][ T4999] do_readv+0x171/0x2c0 [ 2450.541617][ T4999] ? vfs_write+0x61a/0x900 [ 2450.546037][ T4999] __x64_sys_readv+0x41/0x50 [ 2450.550673][ T4999] do_syscall_64+0x44/0xa0 [ 2450.555091][ T4999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2450.560965][ T4999] RIP: 0033:0x7f4fc1ace709 [ 2450.565424][ T4999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.585017][ T4999] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2450.593551][ T4999] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2450.601510][ T4999] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2450.609459][ T4999] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.617587][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2450.625582][ T4999] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:19 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x24000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:19 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r0 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r3, 0x8, &(0x7f0000000100)=[{&(0x7f0000000240)="ae27c1c9f27815ec8c4c86071f93d58380ac0c7adb3eca3d7229f7fc8f99c7747daab0b01a23034ef9b0fa072858f34f11745d1cca7094af87cd41e7e79d09bcadcf93d310bc1e32310caa5b5086e2954648ffaa5b13a6b210f8eecf463f7e05102742db20e4a3afbb42509d7b50d867058eff0559689436bc5c26894713b6d96519fa4781cd1908449c9f1a2e90d4b30c2365fc4e5a3a91a4a2939d80d3e631a7236fb5399a6f02046dcfd8aec679f09aab5938d0de83edec5d1b950e17bc469243515c8f0fe2b9d58ef7fce0", 0xcd}, {&(0x7f0000000380)="d7506633c658d8e99fcde7c43bb22d576989898c26e470a5f15b3dc906b719e7329e3044dd362d78f3d30c9906332abc8d528fda36043212843936b6d6c6bc74e00f476c0bed898c4eabec31e97427539f70e03711c44795", 0x58}, {&(0x7f0000000580)="aedd0d3779128e4d189b61aa3d586713ada3ee283d7303f722dcedc88455e0b403bce63f7521f32cb54c9ab3fded53f4b33e92fd3e70f065e6b7663c8ebdd18587eb1b56844ac9473e2f2a5eef87d96139f4b2fc2a6592ea2dceab1d51187482955be495d7ab5412cf8b6640a93c25463312200fc97ebee8680d2dafb869f70ebc47862c0e0ac85ece28b0b6528f0fcb6c2933379eae4fb676120fd8068db10c98d59240045f867212cbcdadf341289e3328ba48518fd7c2bd3343230ab10e5d2047f6c79e5bdc7ccb040ae27ea5c6ea1129f22d2f1b1c429137", 0xda}], 0x3, 0x4, 0x0, {0x2, r4}}, 0x81) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"df44a17d186bffd52c0120d3248a8e84", 0x0, 0x0, {0x9, 0x80000000}, {0xfffffffffffffe7b, 0xffff}, 0x2f5, [0x40, 0x0, 0x6cd76845, 0x9, 0x9, 0x8, 0x2c, 0xfff, 0x7fff, 0xffffffff, 0x1, 0x8, 0x1, 0x2, 0x7, 0x6]}) fallocate(0xffffffffffffffff, 0x10, 0x7ff, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(0xffffffffffffffff, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB="04000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x7c, 0x0) 16:10:19 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001400)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000003c0)={{r5}, "516a805dc8982bcdb1ea24b97e9503ab02a03dea13a41fba467261078921bdba67e8331253f3fd37fadb7f1d6133a796b616a0d18ae4c4502d4a03aa8133ad3118e65737dda47c7ba8808bf8804c8b806ff2ef2d36c89156508d2ab2f4047e67ef9e13ba271475a9643598376ce9a1848fada8f4f8f96a662dcbfb8fafdcbb5c771359191da31e843b7d263a0956de3a47d8f41fdd2efd6062887347e33bb483ba807f1c3eb7afe8b1bebdc0dfb75d4537d3a08d1fbc6165bf97e77df0a90de30ac3a0353cd3050dc41a4932071b2586edbaa190413a2d4e143933783c72e6eb04e364dc3e4aadb4ffa654e2b0d0526a326418b58178a2046ede2e1971b0a4bb5014649dffd40eeb2f64937ddc52ca0c61885475ad2f4b8a587a0726b00e817bd21b6c73afafb562e7bcde480fcd9a7bc416b0592614f076295b7c01963030ddaae25295b0a8b7c29e9701b9bbd0c9b01f5c242dd727c65e1e52f1be19d7caa6e74da11983f922d0db0dd8589b92322c6935e33f7ee4842fba7438ebaaa1b6417557c12ed8873c34d4600129ac96baa5e8250018b1e703994f5b8520c1c29ebeec3185ae5a4db38a1fb356174bf46c5827b80e5b2cb9c2f06e768227a02bb67673b5a24408a395651e462a3b6ac6e5e590fe505642d3192c7f4bea4dd446d3711b035b8ae0be8e0e65bcf43b998318c8732475c5744f4a40c87a449e884772f5084f7a556549691ee9f47077cf60df71e4b775e48d3bb5ba9e7d1e5716d89b62e0d73cd7154f10f19a69af333a3d97413bd045131125b8161445762c26bead02bb1104479038fb3eb5823166280ab54cdbf3d5e95f4ccd3338e71ca1f5ae331b1ba0b9edc603f47848420b70531d83cd462538b5bea3b468423d14617a584c9a149d4836337b1b7e0b3a919a1f52376d5715284c139cd76a7fd80a825c5ac8d38b3f5cddbc2d62ac19da54056d4d430eb1dc5fbb76eba404184a664a1bca5c5cf73b733670a163272506aeef1042af45231ca99a3e7309c3301ad5d91826235cf8ea186dfa615754aaa585f3a4b2811a49102239b9de1ef197d903d8774d06d348f340b47d2337fbff863a2356e58ca9c8a9dd9912c7ae29b6d0716121dd44ea3485ecb1b7924879d5e8af25733b5e891d82677d12429e242bcee2eba521289c24a0ac835ebfd9b7bd682827fd7828e066d4c686c0333d6a1de49ca317cdc505614091d5be6d38fd97cb64f9f4bfba94a36f15661c118e4cf25069bc7fd49955e8b399e76474059c252185232f15d411b1c5f66e4a24f244d9873b28cb4f30e250aaaad9f4ca5e75018091c652250ae830b06c3404838b80fe0a996edd38f32a5b52f5e3b599bc8011f1a201dc4ef7c591da7bf11af4d11e9b5ef25990c683259de54a82227ba7de2331438270d3cb0b82f902c954fefaa6b02fc647b642716d4bcebe7d866c693ea4edf14fcde4a62e8b574f6d6d4013a57282addb4f0c5b005e6beee53da72ccd70e00cdc2706c2d5e885dc2f85d1bfc7c4bf36836c46ac7a8c780c483ca05103e1200a7b6fbee99cc19a6520d3a8ffa1310107b16f6f6e312fe0292ccf2a51275e8d5b6b04f73eaabdd6241f107328d77ab5227ad190229b6be0462ab62c0328b6a284a4f91616d4252ec6aa0d1d8b19e29c4eace1dd178f22b50d86a74662a8c70aee6433809c0cd525940a26c2fe965c1d22867486412588ea9d3338f9fbd4c30a7bec8b60053a4f9307b3866a02ffbd25531d5929e90c62d911af6c3573dc582df811abc834db3bc6315e1ef9e526b62db49fdc39a6574bdfd7bff6b7aa138104343394f9502249aa8a35682b7182880a380c1a29419d6afe8dbf0ed16739ac2071be1dff527f1d08062c58466a5de745b924034b63babf01f2d790dc25696d4ab3da36ed60f68aafb1c5265a91e8dde4f881c97591328f024fe3440ba3ff276c255d97fc1936da0c7a3cf37e5308f8d0ee7d4849e17330aa88dbb259edfdbf29db95b52f193f1dd35d586d55512ff7988e2ac521b33b74d2b12469e6d448810ac44b240abd7d63e83ccebae4b07f8d63ae0531f986fd4c66fb53785ebf9562c11617462f1ae5949e51b944c646ee252dc6fac124b6eeede87b6c288b062820434982322d3a9ad158485bd35f794c649456c361dbaa8485e5a026287d6fe6a747f407c5e621d707b813dc438138a91e1a73116c8823ac753f8e40ce25ab82732b0b145b11eed278e5efa7b4dfef03979e790284a024ef65678a28a800258e8f2ac82af7cf57e6b4c2ca47d58b83d6983391691da75aacc5492c3832909936d5ce34c5666fa41d89df6fbc2358b11681d5477469f3fc77a2c8f2b7e4204cc3e804ad16830b1ecaf80cd90dad7121b2bdf6ad47dc62aaa6b72a1b99f8be59324f0114fde8afbd74d6daf285cd6987054988bc33ba933bed5e8d140cf80b0c0f0de9ceb2fc70a344d370860bc6a0353a4a853be7a768ca86c5dbc907e648effd91a9d1bf10d8f9dc1cb4938889b3a4e8c46fef2b5f4abd5c50dedfefa13608405752f98a44fee77faa1af0c6e82614cb04cace688d070ca9c1a4eb4cd53f56fbb39907fe7271c273407cf314aad12469a8c649653e451d51ac89945cdd27bc483190b025cab97c5fb697c5a9218d27dbbc43caa4639e26a2c58b82c1fe809f05dbcd6726636ecaa457507e9563a41222400ddb4eefa70d0e1c179e7d8e8a915d36f3936574bb721980a8f54bfe4e7e3309a229b062e7c6decbebe36aead2da8efd71d0e3343c59355569f042f48aa636174783dd737ae14d7625bd37907168af726ee6532fd3c916fad9c9088a4c1404dffc6617fbdde4d4ee5c4c3864b49ef563251bf117c1a7e75a2333365d3777e6951fd397e1c4146daeced9fd6f5efb26f388ba14351dc821458cad99d452b595a406572b83cafb33e6a56d6824a8bc768d1ae21497a8eca048125d2f121c2e7b297993c9232960b05cbce91b9fb0f945acf1497c9379dfeeaaf4e568bc567420dd87541200743e014556bdee269074cf23b04b8f8b84752d5ad967c6423729bd1f4edfd3ae871a3fe3e5904dba0f26854e4c223660dd7a85f40cbf535d7e8d29fcb0f5180598abd8810ad19e4c23dd0d5ed1cc217fb9ce7aa19533b9f56ea973c28edbed8a8ee81e7e82a122d28ec17c044c0de94c18976b2ce5e2e18f4187ea85bae34f472c4b6cdfec91ad29d610fc098d12ea221aa7dde0c869f9aa86665ceb106cf754c1685f1175bd2cf4b66ac6e7a91cbb469f38ea47a153a667f66445afb0bc75a7700a27ae5a98a5a5e061c37f73b8539b270fcfa46db134095ae206fbc902897d612fb27b111a43780219bf24fb39a4a11d057c64f04473ce4499bdb49c1ca9c651d52fcd89e3879ec597cc72d6129810e8f4e81c351ca6153a5c7899f218d996972e36d245253c059933dd57264d524570fb5abcd7f93b1ede78cf4c97b2617b7d2f270f89689c7b19c7beb9add5c0d181f8616f47b4f32c73ff995129762fc0a55c9305235631399573844129b53e5b5433406efc1705c6e4b1028adf9bfc915a26b382cb63706b209fbedd181f570bb946cb14d5378ffca70a199f323d75d2e8f872c8c43353cc851463cdbcf4a033adf6bdc901b8b2b79bed820e6b87903527ecae1005d8e417d0a6d6b39503eb4971870500776323f2b9e441bfe58ab43180fbfd2bf1a516e8a74f462c17ba194b254989d6af47777befe8afdef7921b68b58ab34a3deeb4d2ca6a8c466fb152c68f721bbc7a23b8d9545a3cd2ca0195630c1cdb8e899e414ed2b1e9937b06af81833876492f75385933145c56ebef717ba5205716a5f298eb172425c0951446da5b6cd91cf4f225f3f03aa4460dbfd6340f833eb72d36da84a04323499cb801b436d3b66d6ce99969635292d321fd63c576931725ff49d214ed6aff4ead16fbda0ce01bbf411fc1eff94a9c6ed33025f0b792c7d6e67383b3d9b569eb6b54bc2ea0639908fb7d29c276f9d6f2a8aa7e2f1ccb74406b248a417818f1ce1b55d4a8cd921994f2e667259eba2b9197e54a1894dd66f191258cfa02b6edced2d0adced85ddcc695ea4f9c4f033b57980e0edbb3855aff93dc3c2ee5b5d059fbb3d8baa19fd2549ee456aa360f193d03e459c3d1b620755420c8983b17daaf8b1e9dbc72dbc1483fbda79b30d8adb295058311b135b4876373ee3a72f23857908f918e802285485b19c1dc85d5d8c2dd3fda97b08b3a62007b90ea8bbcad7b58a6cfbf29f89f73d4d34c15e118dd1561754f99e26ca5fc92a9ee339c40aab9207342d4c0d14fee1e3a67b18dbcb697010e92780933efa528de9adbb6b80349449302a7e918010f8ad99ff7b2730693629b14628a3468bd5f2db7be35fa3a00a8e706d3635c3a715870eb6ff27aa2d16918e62ecf8015e4f7635288c55c9844b0eff0045e60f23b29212134051c55200c47a296c74b26a0f9e9b7d4b0b3d0f74b3942bbd2714e5cb74693d81b67c33be08be900a74fb0d72d82fb26510dc3af40ef2dca4ad6b698d97712827d7cd7c039404f1eb87007b2ed55a64eeb7704c46daf51a85a3a0c63cfdaefdd2321d130eaabf84618346cc2370feb8c47121c477330066a09cb47b585b855e545c78f777dee09dbdb0486291215211ec7caac581c11f7d3d158b6d572cb032247f89795a992efe8f518e8f5e1b7267ed5b37d4cab47e8eee5e24fe4974ed18a155afe11081bc8122a27d02e45655d3f3ad6bca34c634f4a3641a1d5a7f9961b11c8ce5cfd0bac7c667a813aba2a85d9daf2c94fe864f2f20eea405603b8524bd261cb6b75d5dfa7972636d8aeadd4fbea6e07c075c87542fa6154221e22ab2dcd87a579a1c9695e8747b1b98042870bf00c36df90b433b693c0e3a2be95a89ae17d9e5b948b07c2a8b0c847bd667214386b4ba990e70f287b94369c9d3df2f55226ce9dd37c8b042db5399f3f0b08d593f37acce3c36599e6eb890aa68dba229b614f1f2cccf3d8202a419cd54e5090fd1f761a951aaa7bb79c4cc6e6b9b052f7757d415ea023a80985e0194960067514805027253a206f0a7a61430fa394ab53ad755b8c86df98791f454f5f28385c47c2d657b7d8daf10aca9ba402927b3e5817eb1e199bfc32b7dc3e337f962c335bbb81eecf40e06d4db669a07422db13959189ca5d7addfc25fe8f69349e930804d6aa10ff777cc8c09835c1b24ea4876ff001695c8a2b0077621fb34fd6e1e02808874d60a89ccdbbc2b80a2a6cb1798692dea0f777e20237a8a5db05101d6df77ac14e4a859066229aebf169df9a77308d8b57f0337ed674a23530855412a3a8231e19d715385d757c11f1e6d3e3233d572f5a57cdc30ce996c2b68da2b40c2f5f10900e59973dafd6c21a14e8d0ce0cd4dfb05ae53963ecbe4f3a1c8c089bc9fb39ebf1af497de315e9aff4383e2997e5b03ad31d8139a4773d9853fb2fdbbe6ff5e98b92f0e864c1d5cb07b50d7e24d63a5345c1b4b6f691f3adb923b0420904700730106ece8b6db1b1ff82b8732bf2502a80be29d68535ab4a579aa1b0c613de35124668c3de75e227b70629a96302e8b32bc78aa7ef90c77b270f8edf5d2b944ecdacd461421838c6ade6f1f2a8f66485590d2403473dfc7334b0458c6b4fe1c605ea6af1ed77fea994585cf0cfc3e53624292d278c59739a9e3ddb85e5384e012066767838c8c454523082df2a4e9dc0e34174c0a5273692336ddfd3307336c00f8b8356cdcd39804b353d9689ceba"}) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x2, 0x0, 0xb6c, 0x2, 0x1}, 0x66) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0xa, 0x8, 0x0}, 0x80) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000013c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, &(0x7f0000000280), 0x0, 0x0, 0x80000, 0x0, {0x0, r7}}, 0xfff) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4000, @fd_index=0x2, 0x401, 0x0, 0x0, 0x1, 0x0, {0x3, r7}}, 0x78) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) 16:10:19 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 39) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:19 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x844) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000180)=0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000380)={0x6, 'geneve0\x00', {0x6}, 0xfff}) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2450.796692][ T5038] FAULT_INJECTION: forcing a failure. [ 2450.796692][ T5038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2450.810063][ T5038] CPU: 1 PID: 5038 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2450.820184][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.830500][ T5038] Call Trace: [ 2450.833781][ T5038] dump_stack_lvl+0xd6/0x122 [ 2450.838428][ T5038] dump_stack+0x11/0x1b [ 2450.842589][ T5038] should_fail+0x23c/0x250 [ 2450.847006][ T5038] __alloc_pages+0x102/0x320 [ 2450.851639][ T5038] alloc_pages+0x382/0x3d0 [ 2450.856136][ T5038] __page_cache_alloc+0x4d/0xf0 [ 2450.860996][ T5038] page_cache_ra_unbounded+0x1be/0x430 [ 2450.866467][ T5038] ondemand_readahead+0x58c/0x7c0 [ 2450.871531][ T5038] page_cache_async_ra+0x17e/0x1a0 [ 2450.876642][ T5038] do_async_mmap_readahead+0x211/0x250 [ 2450.882108][ T5038] filemap_fault+0x106/0x9f0 [ 2450.886761][ T5038] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2450.893207][ T5038] ? cgroup_rstat_updated+0x34/0x100 [ 2450.898590][ T5038] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2450.904143][ T5038] handle_mm_fault+0xc81/0x1580 [ 2450.908991][ T5038] do_user_addr_fault+0x609/0xbe0 [ 2450.914012][ T5038] exc_page_fault+0x91/0x220 [ 2450.918600][ T5038] asm_exc_page_fault+0x1e/0x30 [ 2450.923450][ T5038] RIP: 0010:clear_user+0x60/0xa0 16:10:19 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0xb73f, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="dbeba5e03dcf130272c5b7ba6437bd263f3dd8dd1e56d74b7b7d734e1c8fbcb3b8640a14314db7d7e9b8d3b16246b48fe664367582c2f0ddf824cdb747f64687d5329b2e6a0d", 0x46, 0x4000, 0x1}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x2009) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6c}, 0x8) [ 2450.928385][ T5038] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2450.948164][ T5038] RSP: 0018:ffffc90003d93bb8 EFLAGS: 00010202 [ 2450.954235][ T5038] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2450.962294][ T5038] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2450.970444][ T5038] RBP: ffffc90003d93e58 R08: ffffffff819810e6 R09: 0001c90003d93e57 [ 2450.978411][ T5038] R10: 0000000000000004 R11: ffff88814d9bf080 R12: 0000000020020380 [ 2450.986379][ T5038] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2450.994344][ T5038] ? clear_user+0x36/0xa0 [ 2450.998676][ T5038] ? clear_user+0x48/0xa0 [ 2451.003053][ T5038] iov_iter_zero+0x11b/0xb20 [ 2451.007634][ T5038] ? should_fail+0xd6/0x250 [ 2451.012190][ T5038] read_iter_zero+0x63/0x180 [ 2451.016818][ T5038] do_iter_readv_writev+0x2fb/0x380 [ 2451.022023][ T5038] do_iter_read+0x192/0x5d0 [ 2451.026532][ T5038] ? import_iovec+0x69/0x80 [ 2451.031032][ T5038] do_readv+0x171/0x2c0 [ 2451.035270][ T5038] ? vfs_write+0x61a/0x900 [ 2451.039759][ T5038] __x64_sys_readv+0x41/0x50 16:10:20 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00, @ANYRES16, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="041d00000000a60008000000bfcab5e4138a2efa957449b8e2a2b00a36dae00cad9b03360ee28af87d2d5b2e5b94fd4ac32cb3e2c65e234e5ee85b0c2f5865760ecc55983fbd2ce5c42c029100b38feae6ad211d3da3106c837d99fd121e3aca7216678eb62a76e3f990f3aaf52a6765f94f09db23f31f922bc8686af959591052b3dd6bdb58d1bc8b8be5b000cae81fadae7adde2ccc142e6945048e21c841601a1ebe963bea81d296491be858915ee89bedadb61e2d5e553fd6ac09e1befef56253d8ed8d8bd8fee", @ANYRES64, @ANYBLOB="08000001772ce6eafa1488cc795f77d98e76a12b15a9f823a594eee24803190bb64fc4c7159ebcebb6a155e15fe55cc350806cb3d26c346d64a7473afbe0641f1e74606e002cde0f333a799c827f5186dfe7f6a714f9a5e0aa9905f884f8735e258efcb92da6878a4d15b58ebb47bc2386a2a97534a4283aa6b4ab628810cdfc1a9985c8cafa4a5af912ef659467ed4c270049110060804c5b15e5ce7b7d6868993b44a1609b84286eb873e84d73bafaf72b4ae06c266764b8386e5e94888b5efceee6f57ec74726627399cdbd17e728dc335ff369700b364e4e5f6e10b525b522", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="baeb6252108078ba598cca21eb000000006d2bd610c524dd0d4557bd44041d47ddbc9a28a8b4595357354a3cf211441f0a7108d962aa1abd8a95879fe334f40ceaa8ac0fdb8907e7dfcaa20cca6b73d92cdf33010e0d42446771844226cc50b75dba39c8"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x10400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) [ 2451.044423][ T5038] do_syscall_64+0x44/0xa0 [ 2451.048841][ T5038] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2451.054789][ T5038] RIP: 0033:0x7f4fc1ace709 [ 2451.059199][ T5038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.078937][ T5038] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2451.087360][ T5038] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:20 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x960, &(0x7f0000000240)={0x0, 0x5e1d, 0x10, 0x2, 0x20f, 0x0, r0}, &(0x7f00000dc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x400, &(0x7f00000003c0)={0x0, 0x4096, 0x10, 0x1, 0x1fa, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x1, 0x0, 0x0, {0x0, r7}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="e00100001200040028bd7000fedbdf2503fa07064e224e230900000005000000000800000900000009000000030000008300000008000000", @ANYRES32=r8, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x4c6e, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f00000004c0)={'HL\x00'}, &(0x7f0000000500)=0x1e) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f00000003c0)="9b93b18e758b64a5f633f9b31441a7a9ba889421fb102beeaf0ef92a9ea725856340f0948a759f9a56a264f9a619a559dbbbc30d4096984a3ab7aca6ecd56fc45c5571d91e5e39e576bf50c102d0ea59140472d74659ce384c6dcb912284ec4c9bcf17429b0f2d93c539d88efd4be7de063144e4a2a2395be73fcf79bbc0145817e1d1b3c5d05d7cb2f87e114ebeb597718ac27c98210e317c7b480ef4abf7b06efb3b35dd1868dde036c2c334593cf398177b2fa40667726f657a35a814272bc809a86fd3ef972c8d663623cba386e724a18e942aef", 0xd6, 0x4000040}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2451.095396][ T5038] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2451.103371][ T5038] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.111341][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.119345][ T5038] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:20 executing program 5: r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x19e4, 0x13, 0xb00, 0x70bd2a, 0x25dfdbff, {0x1b}, [@nested={0x29a, 0x30, 0x0, 0x1, [@generic="787536bcfa8ec60ed95ef9e36ee28a4adeca3afaea98da8b41caee8b594a85d959be0a07020253cda564ebea4bdf39f7485bf26480397c55918369a973290eada967a7846a560e589b230c0f9eb54528328a222de71581158e386e64ca67da37a0b7b9506f9787ebc72323558177ef1214c7e5740b7a56ab5adf5cdce565b6c05ba201", @generic="2d609011b251d901a9eb6c05f0a34811c5c29a1daa3b2f3f238db5fa49a368a6792d85300f2767a0968cebbd8b5b774af9a9cc9ae6c6ebdaff431505aef2bb413981b6a4bc84872775850018bc9f98d0bf515935cae8f9fd829ba8c92243136e5cc96572aa59847cc28565d92a9fbba8220f4fc9fde0d2312cc33dbeaefaa22e9f2f51b8aa2fc916c7d971", @generic="6231b181ba473410597deefec7334b0cab4b2f1a743ff50504429fdd5186a5f402168a204704dcc478c281650df253150a14275e9e959c755fc2edd6c24823923a0cacefb8817fcf601f21f8fb9fbe90928e5cbc106e9c8e823ec84937cd95c884aa10246d4775a934686e97260d6cc51ea4804e2f5253bb0173616fed012a8bd38341bc1bd7ced5d77caa1e1f102e2a49fcbc284baaeaa756c8c4eb57af44a39c7b95dfc1ec1e5c4f68e9a88d4c3ed8b78d30c7244a024e5f271fa0a4b089d66174b422cf2a5eb67bb27155f1267f2157d03e1de6e2c128e4e8e3771a6f1048a586072a877c59d335b8dbb5efd5e461ee0a07911f", @typed={0x8, 0x2e, 0x0, 0x0, @pid=r0}, @generic="50f7e1955a1e3dd595a919de72409716d56a9030812712c45c8a07f5b5f23b6be0a9ddd5fb26d6da3de486201c18c9cbacd48ebbd0e0c831fddcaba6409b15a0671446654cf9041e21011b854eb165edb1ea6affc23599a8296c199e87fefaf6d80818210842d598cbd877b6895931c0896e60b6f21971", @typed={0x4, 0x11}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x1f}]}, @nested={0x424, 0x53, 0x0, 0x1, [@generic="18cc84d31982fa22c055d48955a4c3b8de4fe3d8277e07c98f08f5e08e4b38322f629cb914810f8a5603cb4ff706b60c824d1808224cc36313fc74c8c2a3bcd7caea4537dfa11aee33444b68d7469c9c7a8981436b209427c86958cfef70e12186e3ce536bfe3a575e73b168c31a2bbeddb15387f5f9f23066809cf6e5746596fd088d88cc94afa9016c74466ca7debb6a9e59849a23fc7cbaeb56c76678477cc815ed8fb2029edcf3bb4c0b1daedb448c49cacb1a58203ef8caddcef7e4", @typed={0x8, 0x95, 0x0, 0x0, @u32=0x10000}, @generic="9a042af103035c0346fa241ef16d581fde77d26e73e514bac4cf1e566d671f56fc6c8a7c2c5839707d4761f33332164a33f456f8965ff6db0a117b0e89675e3dd8e12db646c6c6e43f1a3fc3189bda180c775d6428d17c07b0fa30469b4d68bb8a15526ece9a298c2d8cfac4afff10ee09791c8ebfb07be4c1d2447f1b29966771170364582d36a0b6b90b84117e74fdbeef9972abba714bda9225feda21603a6ac36d783b83e89650617f7f8b0728e474c7845859c5ae049182891fe1b263ef7670fea3e78aefc68c970c725cc2d410a2d326e14177fcd024119ab71fe59952c2d7ace293c5be33571dedc1", @generic="b4edf99993791a3e0b19edd67d799e1782b7187932bf5da03154d35bd54f1939c194294b09b22f152766631e8bfec33bee879a8cb9a34f0cda4d36dcaf2524175a0cfd18fd53ea5f99fda61350ca6ee50b269c44cfe629948ea8a78dc47e514f453d9170631b9b4f155b786be3d77bdf8192bbbbc9c3070aa37e8c1db70bd5a80f0ee89af70483188ed1be97b9", @typed={0x8, 0x6c, 0x0, 0x0, @pid=r2}, @typed={0x4, 0x66}, @generic="3c3bc3662c69dd5d310a84fdf47e457c039286b4e64767358c0e5541ed971347bc6dc122cd532545f6ac9ca827561118911bcf3a2f64dea90ed74b56530ef3ba080ae154a013827cd9a5c968a52ed5e73af238709c1b38197fe441e03be3f28cc4e09ada02fe623c1376a7a40b84ac28dcc1ca1577c07a3991b9b893462f4d47856c1a6befccdc6607c6d9287e3a9d2a95960a58e66ae5b8f3b26ee2262756383b", @generic="68f58ba99ad5fa2016adbd59b0dd93564311329261983dea4968837467779e951080975c502f9abdf9642a2eaed8c2cf739de38b1e2a2ba57b9965c7", @generic="95d533b2cbec6e0f6ae5dc2b81bb945265e803864c2e9b72cefc6841e1c44efdc22569cf766a1708dad0334a9672b94273615cb079ab99c50e1246ec13172c1eb341e00c16359cfc5ebb0925d2f8385283f511d2416f8c130dc02abb6a46c8bc85f43ae8ef2783d40a45ed819e757956bce7c5125d9e3ae0332c12a6116a238889d11c9bc420a8c8b6a7bf3b4c5272e52c5c8b1d44ee77651d14092793b3cb8857ad8333d7fb66ca5b666c108fbf823d3e7d8984fc4ca1199b002a1c31ef54ca6275d42bec4881675cdbbfbacf537958ce2a3e720448b158b1388fe07db7510ee7299ee781ab9b59d113947135a47c9f04f92f0b", @typed={0x4, 0x17}]}, @generic="38a39497b9b1afd8f13ce9847c3ad17936062aac11ab4f23fb0d76c8049d7de0af606dcc5c7c1364593b904ca6f149989a968bfc0e9e7d5dc1007f13bc4e53a9d4f7ad3ef1972fbaf072d89a63db6c8d8290a765c349530fd9fbb8d80f7566a74f985a294283c9d3e691520925dff5dcaaf0b38ebdda38e08225c52343672237d4b2728faa", @generic="6fd1385127d275eab64eba07f8ba1395b27f82d114f08a1f8c742621b9af8206b8bb8c2c41ae47bc1d695a271899a0d6dd52ff065ea21509bfcad512562328c4677eadedabd08a61a23fce4b7eafed545acd8d7b867bef566336e4b8bc3f826785a8a4d7793b632ea00061dcf7a1bee78ed1d696125cf9b49c5cf6b0b46489139979ec0740bc1f18ab5ff9cdd20567ec40e7c8931e5234f190e4c4845cef3fa6670c3f08299cda672a17e3e233d41ba974d9d2ed9cd68c0791fec0baaae6604dd05fe40a32e77af9256e5c748e308bc5902324a386d1eb", @nested={0x13e, 0x80, 0x0, 0x1, [@generic="34a3b7da3cee90818cf84f61c8733de7d0acdd3b4a01761dac41dfd63ecedd2d314a1b9e85a6d6c2a5184fdd4f87c3cfd4a5bf738dff300c978ac452c341a10498e0b72f9068826b08faf3a37c53c58251020aeaf99c92ef5cbea3645ca498824936d271e77c7aacb2968319720e54994109627b1b9df0951ab1e6ead169fde00d6b6c5e786b88c8d91409db7bd3df05bf950c10f09b79dffc641856d2e2b47695b4c77927a0082fec886ea5d850c2237bf46a1ac9204c5e35177f5accdbd0aae62a20c4423badfe27cf05f3c1b3c5f6ab7bbf891886b07320a3a4e5680d28f4af60171c8e3965", @generic="20acedbb686cb29cba0515263e087d0179a7a0dd574b22dd9c0bced5707c97c66ea586a2848c9794118437b802f4dac7889c07babdd5816638da49e87fd3dfacc0f3928d22860128f759901dd591b217f1e941"]}, @nested={0x1067, 0x35, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32=0x2}, @generic="49a12d41b699a8d3d572728283c7a8c3c6d057fba8611b8a6e511b83ced54045843e4f8fc46974d6b185479a34b8ffc2f41d6d81918e1727ee8e8094a1351d291a9c2228ef33298a3b4fbc4f641eb474f8bd355f8ad9d04bc8cd97", @generic="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"]}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x5}]}, 0x19e4}, 0x1, 0x0, 0x0, 0x4800}, 0x91) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) 16:10:20 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x25000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:20 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x5c39, 0x4, &(0x7f0000000200)=[{&(0x7f0000000300)="a60d57724ac566354cf1a63a71d40d65854a0c704915c2c832e4f7ff6c3342d4f2c307d63b37d8579a75444fb316d5493ea1a162b99db748048af031345a54bb834f2391862b12199dabaf01ac3cadc0143fef1ce03a062c7b0e30b071a4df83efd3d80d3c468fa5d3a2f08a8f73d4c670443c1ecd8bfc4ed168d524af080ec5377d1adb4b4cccdf6c15d2ed0210ca42bc727e99cf7ebf49977a4948f04e5091296b86440523b272995a8f8dbe95d84b0d35c350cc8e71c45f7124b404eec5", 0xbf, 0x6}, {&(0x7f0000000480)="56b080203df36ab35ea5081bb31a77126f53438bff445681e7b549dcde8b679ec967215c85ffe82e21b307687e748107ec7e1071db9f7574e7b2295f16077f47a5cd628f169cb0bf4d0a9154c962831f2db683ac15ea07054d9e71aab74c318cabb56e91eba9dc8b3b1127179f4bb72e4c052b73d661096ce36154cf58ca180d84a0bfdb9bafbf78d6f7b00f52004f52b954019affd1e611d32e01bbb1b1cd78a7217093aec859000d5318d010918a443dc865906f22ab95b3c14cbb5b645f5de22496f12f3e849fbf0f19735a17d58637cc3cab4d915df53f4dfc6fe50d07c1bf8fff1bb7b3379870be52d06738a3", 0xef, 0x3}, {&(0x7f0000000600)="f4cbdba216afc7c72e8ecba1fdcf5dd9e287a9c8e8dc597e21fb22b7df8acf3049e84a83d142940afacdc8f0d1d57fad0da7e3ef5c834d855f158412892d23b4f138aaf1112a49953b710897a54cca96499273cf0a9b5b2cbfa459cec62d4e49a199fdd2b60e3fb86ea2b318bdb6106ba4dfce4cc360545cfe1d51b663e115faed8cd7974c59f33ac674425fccc01620b148365fb99a2be977f64b238a8349f4f5b1377d0507819dc5b6870646a7d470a6f37658790d", 0xb6, 0xfff}, {&(0x7f00000006c0)="1bfb9cd400161fa74bc9639bd73daae0223881def162ee1e140216a6e7ae86236499d95a425e3c05e143e8a0d578ebacface0bb6548deb8bc6480eed3a9d30cc2857161c60912bdda37f331dd70772dfc729c8924ce652cd95522add9d09d2f30ce1f14ce04502b8a4caedda8fccb278d140132b06f550db6488ba16606b1a1d70fb5e390c5ae2c852a911871e6c19bae24a", 0x92, 0x100000000}], 0x1004000, &(0x7f0000000780)={[{@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x400}}, {@noblock_validity}, {@block_validity}, {@nojournal_checksum}, {@auto_da_alloc}, {@barrier}, {@jqfmt_vfsv0}, {@usrquota}, {@resgid}], [{@dont_hash}]}) 16:10:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x120, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa4, 0x14}}}}, [@NL80211_ATTR_IE={0xf1, 0x2a, [@tim={0x5, 0xd4, {0x7, 0x66, 0x58, "d45965b7fe36b5754b85c0222c22a49863eaba6a77ed07df0d99bcd7e3edf026d1ce64e39687cdc2821a23bd0d0b7276bc7a1182073ab892452d49a84e572239a158632930f4a90a96ebee592ef2cd8182cc281e3cb4b759652c4a7d25b7c20bf7f1f766d174b2bc22797e6357ac7f94822371498708eb2d64e7e058ca718f7fb9ed71fd76ad240460d78d6ee9c50ab6e5fcac962292c9f8636abbf04177e607d01f985e7146710956f04013e5cdd318fbb733d56dd67c7b3615448d9a91cd1d9f664017292479684ebc4321464b548f87"}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x0, 0x7f, @broadcast, 0x4, 0x10001, 0xeedc}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x8001}, 0x800) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) mknodat$null(r6, &(0x7f0000000540)='./file0\x00', 0x4, 0x103) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000014c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000b80)={&(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/105, 0x69}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000900)=""/210, 0xd2}, {&(0x7f0000000a00)=""/55, 0x37}, {&(0x7f0000000a40)=""/51, 0x33}], 0x8, &(0x7f0000000b00)=""/113, 0x71}, 0x0, 0x1, 0x1, {0x2}}, 0x4) syz_io_uring_submit(r2, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r1, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 40) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:20 executing program 1: r0 = syz_io_uring_setup(0x163, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x35c}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x146}, &(0x7f00006d9000/0x1000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) r9 = syz_io_uring_setup(0x84, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x400030a, 0x0, r3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x401) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2451.424222][ T5082] FAULT_INJECTION: forcing a failure. [ 2451.424222][ T5082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2451.437478][ T5082] CPU: 1 PID: 5082 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2451.447540][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.457680][ T5082] Call Trace: [ 2451.460958][ T5082] dump_stack_lvl+0xd6/0x122 [ 2451.465562][ T5082] dump_stack+0x11/0x1b [ 2451.469719][ T5082] should_fail+0x23c/0x250 [ 2451.474136][ T5082] __alloc_pages+0x102/0x320 [ 2451.478729][ T5082] alloc_pages+0x382/0x3d0 [ 2451.483148][ T5082] __page_cache_alloc+0x4d/0xf0 [ 2451.488003][ T5082] page_cache_ra_unbounded+0x1be/0x430 [ 2451.493613][ T5082] ondemand_readahead+0x58c/0x7c0 [ 2451.498639][ T5082] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2451.504880][ T5082] page_cache_async_ra+0x17e/0x1a0 [ 2451.509997][ T5082] do_async_mmap_readahead+0x211/0x250 [ 2451.515460][ T5082] filemap_fault+0x106/0x9f0 16:10:20 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6401, &(0x7f0000000240)={0x0, 0x7ba7, 0x4, 0x3, 0x19f}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x69ce, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r6, r8, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f00006d9000/0x1000)=nil, 0x1000, 0x15, 0x1}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x4, 0xff, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2451.520054][ T5082] ? __perf_event_task_sched_in+0x7e7/0x850 [ 2451.525995][ T5082] ? cgroup_rstat_updated+0x34/0x100 [ 2451.531284][ T5082] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2451.536934][ T5082] handle_mm_fault+0xc81/0x1580 [ 2451.541854][ T5082] do_user_addr_fault+0x609/0xbe0 [ 2451.546881][ T5082] exc_page_fault+0x91/0x220 [ 2451.551469][ T5082] asm_exc_page_fault+0x1e/0x30 [ 2451.556339][ T5082] RIP: 0010:clear_user+0x60/0xa0 [ 2451.561323][ T5082] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2451.580931][ T5082] RSP: 0018:ffffc90003e33bb8 EFLAGS: 00010202 [ 2451.587005][ T5082] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2451.594977][ T5082] RDX: ffffc9000f42d000 RSI: 0000000000002d5f RDI: 0000000020020000 [ 2451.602948][ T5082] RBP: ffffc90003e33e58 R08: ffffffff819810e6 R09: 0001c90003e33e57 [ 2451.610920][ T5082] R10: 0000000000000004 R11: ffff88814f5ff040 R12: 0000000020020380 [ 2451.618896][ T5082] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2451.626870][ T5082] ? clear_user+0x36/0xa0 [ 2451.631256][ T5082] ? clear_user+0x48/0xa0 [ 2451.635590][ T5082] iov_iter_zero+0x11b/0xb20 [ 2451.640181][ T5082] ? should_fail+0xd6/0x250 [ 2451.644857][ T5082] read_iter_zero+0x63/0x180 [ 2451.649501][ T5082] do_iter_readv_writev+0x2fb/0x380 [ 2451.654774][ T5082] do_iter_read+0x192/0x5d0 [ 2451.659282][ T5082] ? import_iovec+0x69/0x80 [ 2451.663782][ T5082] do_readv+0x171/0x2c0 [ 2451.667951][ T5082] ? vfs_write+0x61a/0x900 [ 2451.672375][ T5082] __x64_sys_readv+0x41/0x50 [ 2451.676966][ T5082] do_syscall_64+0x44/0xa0 [ 2451.681388][ T5082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2451.687288][ T5082] RIP: 0033:0x7f4fc1ace709 [ 2451.691744][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.711443][ T5082] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 16:10:20 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_submit(0x0, r2, &(0x7f00000006c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000680)='./file0/file0\x00', 0x400, 0x6000}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r6 = syz_io_uring_setup(0x7506, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x6}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000480)="f9367f68eb6a0f1f0d52acdde23976f0193993893389ce280e7784ce85d6596b91de8c5f06ee33216bc273959358ad865023a60cab49b5a6d1d79c0df311fb3ccbd03b31aaa77a7bdae63bdc74f35f0e113c25662c1d83d002fa2f189b358a819f12db87f9e990f69dc9fac933daeca1bebf1bb57bc7b86d15becdcebb81f3479ab6d5057a8d69124ff75aa99cdbfbdf9039652aa166068eaadb7e87086cf75784e25179a692d85af662bec5c542aea988036f237048aa22d5547fb4bab92ba43852b4e030fd464454a31ffa0f2766cdb0798e1b66515e5054bb04bd253c9842fa56bdc764a23f62b32b633873cc327934bccedbc5e3433f03", 0xf9, 0x45}, 0xff) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x30) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) [ 2451.719861][ T5082] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2451.727906][ T5082] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2451.735878][ T5082] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.743854][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2451.751819][ T5082] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:20 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000240)={0x80, 0x9, 0x3, 0x9, 0x2, [0x6, 0x80000001, 0xb3, 0x2]}) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000280)) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 1: r0 = syz_io_uring_setup(0x1498, &(0x7f00000002c0)={0x0, 0x47a8}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r7 = signalfd(r3, &(0x7f0000000180)={[0x101]}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000000240)) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x2000, 0x1) 16:10:20 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x26000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:20 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 41) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:20 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) read(r5, &(0x7f00000003c0)=""/4096, 0x1000) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:20 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x25000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2451.971316][ T5114] FAULT_INJECTION: forcing a failure. [ 2451.971316][ T5114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2451.984593][ T5114] CPU: 0 PID: 5114 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2451.994697][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.004874][ T5114] Call Trace: [ 2452.008152][ T5114] dump_stack_lvl+0xd6/0x122 [ 2452.012748][ T5114] dump_stack+0x11/0x1b [ 2452.016992][ T5114] should_fail+0x23c/0x250 [ 2452.021473][ T5114] __alloc_pages+0x102/0x320 [ 2452.026128][ T5114] alloc_pages+0x382/0x3d0 [ 2452.030562][ T5114] __page_cache_alloc+0x4d/0xf0 [ 2452.035454][ T5114] page_cache_ra_unbounded+0x1be/0x430 [ 2452.040934][ T5114] ondemand_readahead+0x58c/0x7c0 [ 2452.046046][ T5114] page_cache_async_ra+0x17e/0x1a0 [ 2452.051162][ T5114] do_async_mmap_readahead+0x211/0x250 [ 2452.056719][ T5114] filemap_fault+0x106/0x9f0 [ 2452.061344][ T5114] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2452.067677][ T5114] ? cgroup_rstat_updated+0x34/0x100 [ 2452.072961][ T5114] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2452.078515][ T5114] handle_mm_fault+0xc81/0x1580 [ 2452.083373][ T5114] do_user_addr_fault+0x609/0xbe0 [ 2452.088394][ T5114] exc_page_fault+0x91/0x220 [ 2452.092984][ T5114] asm_exc_page_fault+0x1e/0x30 [ 2452.097909][ T5114] RIP: 0010:clear_user+0x60/0xa0 [ 2452.102851][ T5114] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2452.122491][ T5114] RSP: 0018:ffffc90003e9bbb8 EFLAGS: 00010202 [ 2452.128565][ T5114] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2452.136591][ T5114] RDX: ffffc9000f42d000 RSI: 0000000000002d5f RDI: 0000000020020000 [ 2452.144647][ T5114] RBP: ffffc90003e9be58 R08: ffffffff819810e6 R09: 0001c90003e9be57 [ 2452.152658][ T5114] R10: 0000000000000004 R11: ffff888129d60040 R12: 0000000020020380 [ 2452.160631][ T5114] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2452.168607][ T5114] ? clear_user+0x36/0xa0 [ 2452.172960][ T5114] ? clear_user+0x48/0xa0 [ 2452.177363][ T5114] iov_iter_zero+0x11b/0xb20 [ 2452.182036][ T5114] ? should_fail+0xd6/0x250 [ 2452.186663][ T5114] read_iter_zero+0x63/0x180 [ 2452.191335][ T5114] do_iter_readv_writev+0x2fb/0x380 [ 2452.196584][ T5114] do_iter_read+0x192/0x5d0 [ 2452.201093][ T5114] ? import_iovec+0x69/0x80 [ 2452.205601][ T5114] do_readv+0x171/0x2c0 [ 2452.209764][ T5114] ? vfs_write+0x61a/0x900 [ 2452.214192][ T5114] __x64_sys_readv+0x41/0x50 [ 2452.218850][ T5114] do_syscall_64+0x44/0xa0 [ 2452.223436][ T5114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2452.229406][ T5114] RIP: 0033:0x7f4fc1ace709 [ 2452.233827][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.253438][ T5114] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2452.261859][ T5114] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:21 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r6 = eventfd2(0xfffff453, 0x80800) r7 = dup3(r0, 0xffffffffffffffff, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[r0, r6, r7]}, 0x3) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4004, @fd_index=0xa, 0xfffffffffffff801, 0xfff, 0x40, 0x2, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:21 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000240), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r7 = syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd=r7, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2452.269935][ T5114] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2452.277911][ T5114] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.285885][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.293861][ T5114] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:21 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x2, 0x4, 0x1, {0x0, 0x0, r0}}, 0x14000000) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:21 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x27000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:21 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x1b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:21 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x10000084, &(0x7f0000000080)={0x0, 0x9446}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:21 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 42) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:21 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r0, 0x10000000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r3, r5, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x9, &(0x7f0000000280)={r6, r7+10000000}, 0x1, 0x1}, 0x6) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r9, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r9, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2452.508592][ T5148] FAULT_INJECTION: forcing a failure. [ 2452.508592][ T5148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2452.521881][ T5148] CPU: 1 PID: 5148 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2452.532022][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.542075][ T5148] Call Trace: [ 2452.545352][ T5148] dump_stack_lvl+0xd6/0x122 [ 2452.550009][ T5148] dump_stack+0x11/0x1b [ 2452.554171][ T5148] should_fail+0x23c/0x250 [ 2452.558591][ T5148] __alloc_pages+0x102/0x320 [ 2452.563227][ T5148] alloc_pages+0x382/0x3d0 [ 2452.567637][ T5148] __page_cache_alloc+0x4d/0xf0 [ 2452.572524][ T5148] page_cache_ra_unbounded+0x1be/0x430 [ 2452.577998][ T5148] ondemand_readahead+0x58c/0x7c0 [ 2452.583093][ T5148] page_cache_async_ra+0x17e/0x1a0 [ 2452.588207][ T5148] do_async_mmap_readahead+0x211/0x250 [ 2452.593802][ T5148] filemap_fault+0x106/0x9f0 [ 2452.598429][ T5148] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2452.604822][ T5148] ? cgroup_rstat_updated+0x34/0x100 [ 2452.610113][ T5148] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2452.615661][ T5148] handle_mm_fault+0xc81/0x1580 [ 2452.620566][ T5148] do_user_addr_fault+0x609/0xbe0 [ 2452.625689][ T5148] exc_page_fault+0x91/0x220 [ 2452.630284][ T5148] asm_exc_page_fault+0x1e/0x30 [ 2452.635140][ T5148] RIP: 0010:clear_user+0x60/0xa0 16:10:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc0268d46bb64035c}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1f}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4fc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) [ 2452.640076][ T5148] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2452.659685][ T5148] RSP: 0018:ffffc90003f4bbb8 EFLAGS: 00010202 [ 2452.665877][ T5148] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2452.673852][ T5148] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2452.681822][ T5148] RBP: ffffc90003f4be58 R08: ffffffff819810e6 R09: 0001c90003f4be57 [ 2452.689797][ T5148] R10: 0000000000000004 R11: ffff88814d591000 R12: 0000000020020380 [ 2452.697827][ T5148] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 16:10:21 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x8000000) r4 = syz_io_uring_setup(0x6dba, &(0x7f0000000240)={0x0, 0x9de8, 0x4, 0x1, 0x91}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000000940), &(0x7f0000000400)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/8, 0x8}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000680)=""/85, 0x55}], 0x5}, 0x0, 0x40010000, 0x1, {0x3, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_setup(0x5253, &(0x7f0000000800)={0x0, 0x8c7e, 0x4, 0x0, 0x314, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000880)=0x0, &(0x7f00000008c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r9, 0x118, &(0x7f0000000900), 0x0, 0x4) syz_io_uring_submit(r1, r7, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:21 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = io_uring_setup(0x66cb, &(0x7f0000000240)={0x0, 0x96bf, 0x4, 0x1, 0x169, 0x0, r3}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r5, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2452.705840][ T5148] ? clear_user+0x36/0xa0 [ 2452.710222][ T5148] ? clear_user+0x48/0xa0 [ 2452.714548][ T5148] iov_iter_zero+0x11b/0xb20 [ 2452.719130][ T5148] ? should_fail+0xd6/0x250 [ 2452.723621][ T5148] read_iter_zero+0x63/0x180 [ 2452.728233][ T5148] do_iter_readv_writev+0x2fb/0x380 [ 2452.733509][ T5148] do_iter_read+0x192/0x5d0 [ 2452.738017][ T5148] ? import_iovec+0x69/0x80 [ 2452.742515][ T5148] do_readv+0x171/0x2c0 [ 2452.746731][ T5148] ? vfs_write+0x61a/0x900 [ 2452.751182][ T5148] __x64_sys_readv+0x41/0x50 [ 2452.755774][ T5148] do_syscall_64+0x44/0xa0 [ 2452.760215][ T5148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2452.766145][ T5148] RIP: 0033:0x7f4fc1ace709 [ 2452.770544][ T5148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.790146][ T5148] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2452.798563][ T5148] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:21 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) io_uring_enter(r5, 0x6974, 0x3640, 0x4, &(0x7f0000000180)={[0x7ff]}, 0x8) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000240)) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2452.806584][ T5148] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2452.814559][ T5148] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.822526][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.830504][ T5148] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x0, 0x1, 0xfffffffb, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x1, 0x5, 0xfffffffd}}) 16:10:21 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="778c87abc39d008bb909afd3b98adf6a449c83d66008ae", 0x17, 0x4008000, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:21 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x610c, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="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", 0x1000}, 0x10005) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000240)={'veth0_to_hsr\x00', {0x2, 0x0, @broadcast}}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) r6 = timerfd_create(0x6, 0x800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, r4, r5, r6, 0xffffffffffffffff, r0], 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001500), &(0x7f0000000200)='./file0\x00', 0x20, 0x5400, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:21 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x28000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:22 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_msfilter(r7, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140, 0x1, {0x2}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) 16:10:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 43) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="58010000100013070000000000000000ff020000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0) 16:10:22 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_setup(0x7e1b, &(0x7f0000000440)={0x0, 0x5fa2, 0x4, 0x1, 0x8e, 0x0, r3}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f00000da000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x401) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000540)={0x0, 0x43, 0x18}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x5) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x1) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2453.089419][ T5200] FAULT_INJECTION: forcing a failure. [ 2453.089419][ T5200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2453.102675][ T5200] CPU: 0 PID: 5200 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2453.112805][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.122913][ T5200] Call Trace: [ 2453.126204][ T5200] dump_stack_lvl+0xd6/0x122 [ 2453.130814][ T5200] dump_stack+0x11/0x1b [ 2453.135041][ T5200] should_fail+0x23c/0x250 [ 2453.139511][ T5200] __alloc_pages+0x102/0x320 [ 2453.144128][ T5200] alloc_pages+0x382/0x3d0 [ 2453.148576][ T5200] __page_cache_alloc+0x4d/0xf0 [ 2453.153496][ T5200] page_cache_ra_unbounded+0x1be/0x430 [ 2453.159011][ T5200] ondemand_readahead+0x58c/0x7c0 [ 2453.164107][ T5200] page_cache_async_ra+0x17e/0x1a0 [ 2453.169228][ T5200] do_async_mmap_readahead+0x211/0x250 [ 2453.174739][ T5200] filemap_fault+0x106/0x9f0 [ 2453.179335][ T5200] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:22 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0)={0x0, 0xfffffffc}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00006db000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006dc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x3, r7}}, 0x3) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x401) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x1ff) 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/152, 0x98}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000003380)=""/150, 0x96}, {&(0x7f0000000a00)=""/184, 0x107}, {&(0x7f0000000ac0)=""/202, 0xca}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/239, 0xef}, {&(0x7f0000000d00)}], 0x6, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000002d80)=""/246, 0xf6}, {&(0x7f0000000940)=""/30, 0x1e}], 0x3, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/117, 0x75}, {&(0x7f0000001240)=""/248, 0xf8}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000001340)=""/154, 0x9a}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f0000002500)=""/124, 0x7c}], 0x6, &(0x7f00000009c0)}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/17, 0x11}], 0x1, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002800)=""/107, 0x6b}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000ffff00010000000100d8aa5230e900e73f23886ab93624ca351dcf8759e11c4d82bb2695400b1884e3d04367daa58d247020ae2a0e26d0c33075222e36c3809079e507ed277e7e94584e306fa30243953686a044e86e2740bd08427c2cf8739240919bb2f53e27f46349bf4b670d72d3da", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{&(0x7f0000002940), 0x6e, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x40002000, &(0x7f0000002c40)={0x0, 0x989680}) syz_io_uring_submit(0x0, r2, &(0x7f0000002c80)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r6, 0x8c3, 0x0, 0x10001, 0x1, 0x1}, 0x5) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f00000004c0)='./file0\x00', 0x188, 0xa0cc2}, 0x3) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2453.185671][ T5200] ? cgroup_rstat_updated+0x34/0x100 [ 2453.190996][ T5200] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2453.196574][ T5200] handle_mm_fault+0xc81/0x1580 [ 2453.201454][ T5200] do_user_addr_fault+0x609/0xbe0 [ 2453.206479][ T5200] exc_page_fault+0x91/0x220 [ 2453.211101][ T5200] asm_exc_page_fault+0x1e/0x30 [ 2453.215994][ T5200] RIP: 0010:clear_user+0x60/0xa0 [ 2453.220977][ T5200] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2453.240645][ T5200] RSP: 0018:ffffc9000404bbb8 EFLAGS: 00010202 [ 2453.246713][ T5200] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2453.254712][ T5200] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2453.262687][ T5200] RBP: ffffc9000404be58 R08: ffffffff819810e6 R09: 0001c9000404be57 [ 2453.270667][ T5200] R10: 0000000000000004 R11: ffff88814d427040 R12: 0000000020020380 [ 2453.278673][ T5200] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/152, 0x98}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000003380)=""/150, 0x96}, {&(0x7f0000000a00)=""/184, 0x107}, {&(0x7f0000000ac0)=""/202, 0xca}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/239, 0xef}, {&(0x7f0000000d00)}], 0x6, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000002d80)=""/246, 0xf6}, {&(0x7f0000000940)=""/30, 0x1e}], 0x3, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/117, 0x75}, {&(0x7f0000001240)=""/248, 0xf8}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000001340)=""/154, 0x9a}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f0000002500)=""/124, 0x7c}], 0x6, &(0x7f00000009c0)}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/17, 0x11}], 0x1, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002800)=""/107, 0x6b}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000ffff00010000000100d8aa5230e900e73f23886ab93624ca351dcf8759e11c4d82bb2695400b1884e3d04367daa58d247020ae2a0e26d0c33075222e36c3809079e507ed277e7e94584e306fa30243953686a044e86e2740bd08427c2cf8739240919bb2f53e27f46349bf4b670d72d3da", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{&(0x7f0000002940), 0x6e, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x40002000, &(0x7f0000002c40)={0x0, 0x989680}) syz_io_uring_submit(0x0, r2, &(0x7f0000002c80)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r6, 0x8c3, 0x0, 0x10001, 0x1, 0x1}, 0x5) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2453.286645][ T5200] ? clear_user+0x36/0xa0 [ 2453.290986][ T5200] ? clear_user+0x48/0xa0 [ 2453.295366][ T5200] iov_iter_zero+0x11b/0xb20 [ 2453.299998][ T5200] ? should_fail+0xd6/0x250 [ 2453.304499][ T5200] read_iter_zero+0x63/0x180 [ 2453.309094][ T5200] do_iter_readv_writev+0x2fb/0x380 [ 2453.314301][ T5200] do_iter_read+0x192/0x5d0 [ 2453.318911][ T5200] ? import_iovec+0x69/0x80 [ 2453.323444][ T5200] do_readv+0x171/0x2c0 [ 2453.327605][ T5200] ? vfs_write+0x61a/0x900 [ 2453.332021][ T5200] __x64_sys_readv+0x41/0x50 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/152, 0x98}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000003380)=""/150, 0x96}, {&(0x7f0000000a00)=""/184, 0x107}, {&(0x7f0000000ac0)=""/202, 0xca}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/239, 0xef}, {&(0x7f0000000d00)}], 0x6, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000002d80)=""/246, 0xf6}, {&(0x7f0000000940)=""/30, 0x1e}], 0x3, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/117, 0x75}, {&(0x7f0000001240)=""/248, 0xf8}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000001340)=""/154, 0x9a}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f0000002500)=""/124, 0x7c}], 0x6, &(0x7f00000009c0)}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/17, 0x11}], 0x1, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002800)=""/107, 0x6b}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000ffff00010000000100d8aa5230e900e73f23886ab93624ca351dcf8759e11c4d82bb2695400b1884e3d04367daa58d247020ae2a0e26d0c33075222e36c3809079e507ed277e7e94584e306fa30243953686a044e86e2740bd08427c2cf8739240919bb2f53e27f46349bf4b670d72d3da", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{&(0x7f0000002940), 0x6e, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x40002000, &(0x7f0000002c40)={0x0, 0x989680}) syz_io_uring_submit(0x0, r2, &(0x7f0000002c80)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r6, 0x8c3, 0x0, 0x10001, 0x1, 0x1}, 0x5) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2453.336616][ T5200] do_syscall_64+0x44/0xa0 [ 2453.341139][ T5200] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2453.347067][ T5200] RIP: 0033:0x7f4fc1ace709 [ 2453.351494][ T5200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.371149][ T5200] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2453.379676][ T5200] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/152, 0x98}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000003380)=""/150, 0x96}, {&(0x7f0000000a00)=""/184, 0x107}, {&(0x7f0000000ac0)=""/202, 0xca}, {&(0x7f0000000bc0)=""/36, 0x24}, {&(0x7f0000000c00)=""/239, 0xef}, {&(0x7f0000000d00)}], 0x6, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000002d80)=""/246, 0xf6}, {&(0x7f0000000940)=""/30, 0x1e}], 0x3, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/117, 0x75}, {&(0x7f0000001240)=""/248, 0xf8}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000001340)=""/154, 0x9a}, {&(0x7f0000001400)=""/174, 0xae}, {&(0x7f0000002500)=""/124, 0x7c}], 0x6, &(0x7f00000009c0)}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/17, 0x11}], 0x1, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002800)=""/107, 0x6b}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000ffff00010000000100d8aa5230e900e73f23886ab93624ca351dcf8759e11c4d82bb2695400b1884e3d04367daa58d247020ae2a0e26d0c33075222e36c3809079e507ed277e7e94584e306fa30243953686a044e86e2740bd08427c2cf8739240919bb2f53e27f46349bf4b670d72d3da", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}, {{&(0x7f0000002940), 0x6e, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x40002000, &(0x7f0000002c40)={0x0, 0x989680}) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) [ 2453.387723][ T5200] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2453.395729][ T5200] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.403707][ T5200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.411679][ T5200] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:22 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x29000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:22 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x2, 0xd6}, 0x18) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x7ff) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 44) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58010000100013070000000000000000ff020000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYBLOB="f9d85fde4444b0f9d128e0d2ce427d158868a876a52ddef32cdc9072ab7a2632955eb76da9cc9547c12a5bf84bf4a28e0c6e8790669a0aede1373e1e47e758e1d204c932fcc798014274e975b232c7e8649d71a02cd9a940e8610c3f5bdbf531fb31888feb018565d82e406a6298ebc3d19b58df7aee6cba910a4407cee7495720d7e6bf62c6fd375b88f0c86df9725dca0e810a2709502164706bd368a191aae3474ec500b629cd1caad2ca8b258e94f23aaa", @ANYRES32=r1], 0x158}}, 0x0) 16:10:22 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x160b, &(0x7f00000003c0)={0x0, 0xd741, 0x21, 0x3, 0x382, 0x0, r3}, &(0x7f00000dc000/0x4000)=nil, &(0x7f00000dd000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_setup(0x1692, &(0x7f0000000240)={0x0, 0xb185, 0x1, 0x0, 0x1fa, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r9, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x8064}, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, r6, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/138, 0x8a}, 0x0, 0x10000, 0x0, {0x2}}, 0x1f) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:22 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x3, 0x240, 0x23456}, 0xffff8000) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2453.844087][ T5253] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 16:10:22 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x401) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x9, 0x0, 0x20, 0x20, 0x11, 0x1, {0x3, r5}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x41}, @multicast1}, 0xc) [ 2453.903905][ T5257] FAULT_INJECTION: forcing a failure. [ 2453.903905][ T5257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2453.917168][ T5257] CPU: 0 PID: 5257 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2453.927230][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.937284][ T5257] Call Trace: [ 2453.940605][ T5257] dump_stack_lvl+0xd6/0x122 [ 2453.945232][ T5257] dump_stack+0x11/0x1b [ 2453.949391][ T5257] should_fail+0x23c/0x250 16:10:22 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2453.953839][ T5257] __alloc_pages+0x102/0x320 [ 2453.958433][ T5257] alloc_pages+0x382/0x3d0 [ 2453.962853][ T5257] __page_cache_alloc+0x4d/0xf0 [ 2453.967776][ T5257] page_cache_ra_unbounded+0x1be/0x430 [ 2453.973333][ T5257] ondemand_readahead+0x58c/0x7c0 [ 2453.978506][ T5257] page_cache_async_ra+0x17e/0x1a0 [ 2453.983628][ T5257] do_async_mmap_readahead+0x211/0x250 [ 2453.989164][ T5257] filemap_fault+0x106/0x9f0 [ 2453.993756][ T5257] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:23 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2454.000118][ T5257] ? cgroup_rstat_updated+0x34/0x100 [ 2454.005453][ T5257] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2454.011062][ T5257] handle_mm_fault+0xc81/0x1580 [ 2454.016364][ T5257] ? finish_task_switch+0xce/0x290 [ 2454.021484][ T5257] do_user_addr_fault+0x609/0xbe0 [ 2454.026519][ T5257] exc_page_fault+0x91/0x220 [ 2454.031120][ T5257] asm_exc_page_fault+0x1e/0x30 [ 2454.035982][ T5257] RIP: 0010:clear_user+0x60/0xa0 [ 2454.040914][ T5257] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2454.060592][ T5257] RSP: 0018:ffffc9000419bbb8 EFLAGS: 00010202 [ 2454.066660][ T5257] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2454.074632][ T5257] RDX: ffffc9000f42d000 RSI: 0000000000002cc5 RDI: 0000000020020000 [ 2454.082610][ T5257] RBP: ffffc9000419be58 R08: ffffffff819810e6 R09: 0001c9000419be57 [ 2454.090591][ T5257] R10: 0000000000000004 R11: ffff888150b62040 R12: 0000000020020380 [ 2454.098909][ T5257] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2454.107046][ T5257] ? clear_user+0x36/0xa0 [ 2454.111452][ T5257] ? clear_user+0x48/0xa0 [ 2454.115829][ T5257] iov_iter_zero+0x11b/0xb20 [ 2454.120496][ T5257] ? __schedule+0x435/0x680 [ 2454.124997][ T5257] ? should_fail+0xd6/0x250 [ 2454.129502][ T5257] read_iter_zero+0x63/0x180 [ 2454.134232][ T5257] do_iter_readv_writev+0x2fb/0x380 [ 2454.139436][ T5257] do_iter_read+0x192/0x5d0 [ 2454.143944][ T5257] ? import_iovec+0x69/0x80 [ 2454.148455][ T5257] do_readv+0x171/0x2c0 [ 2454.152626][ T5257] ? vfs_write+0x61a/0x900 [ 2454.157065][ T5257] __x64_sys_readv+0x41/0x50 [ 2454.161729][ T5257] do_syscall_64+0x44/0xa0 [ 2454.166267][ T5257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2454.172247][ T5257] RIP: 0033:0x7f4fc1ace709 [ 2454.176642][ T5257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.196229][ T5257] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2454.204639][ T5257] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2454.212699][ T5257] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2454.220651][ T5257] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.228667][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.236635][ T5257] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:23 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 45) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:23 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x4000010, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x10001, 0x1, &(0x7f00000003c0)="7f164472c1b42dfe48b4664cc82fafe1f9f065da56688c593508c290634181aab422946d97d30ed9a75303ab6da3cdc3262e16499d0512e287699c21a4e30825e1a303e0f5cab131160866b8849f53dbac8c5626d5bb9c48640350ccaad3b1654b263b617556135b472789ca1399f1f516d8fafbd235539d2be7f31f169a96c47c05501b8e3fa2008441074d2e176d668c39834d606e56dadd735635a8a1fcfe66dc4dfdc7248c1dca0b189da4c83fa87536a6f7c7f8b5aed05a0624d4cf7f06d79f56da490e", 0xffc00000, 0x0, 0x0, {0x3}}, 0x80) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x620d, &(0x7f0000000240)={0x0, 0x53d3, 0x0, 0x0, 0x3de}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00006da000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000380)=0x0) r5 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(0x0, r4, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x2) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x5000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:23 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f00000db000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r5, r3, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r9}}, 0x7) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2454.407633][ T5295] FAULT_INJECTION: forcing a failure. [ 2454.407633][ T5295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2454.420913][ T5295] CPU: 1 PID: 5295 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2454.431005][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.441071][ T5295] Call Trace: [ 2454.444343][ T5295] dump_stack_lvl+0xd6/0x122 [ 2454.448936][ T5295] dump_stack+0x11/0x1b [ 2454.453091][ T5295] should_fail+0x23c/0x250 [ 2454.457579][ T5295] __alloc_pages+0x102/0x320 [ 2454.462167][ T5295] alloc_pages+0x382/0x3d0 [ 2454.466587][ T5295] __page_cache_alloc+0x4d/0xf0 [ 2454.471473][ T5295] page_cache_ra_unbounded+0x1be/0x430 [ 2454.476958][ T5295] ondemand_readahead+0x58c/0x7c0 [ 2454.481983][ T5295] page_cache_async_ra+0x17e/0x1a0 [ 2454.487099][ T5295] do_async_mmap_readahead+0x211/0x250 [ 2454.492617][ T5295] filemap_fault+0x106/0x9f0 [ 2454.497206][ T5295] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2454.503534][ T5295] ? cgroup_rstat_updated+0x34/0x100 [ 2454.508824][ T5295] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2454.514374][ T5295] handle_mm_fault+0xc81/0x1580 [ 2454.520503][ T5295] do_user_addr_fault+0x609/0xbe0 [ 2454.525522][ T5295] exc_page_fault+0x91/0x220 [ 2454.530107][ T5295] asm_exc_page_fault+0x1e/0x30 [ 2454.535065][ T5295] RIP: 0010:clear_user+0x60/0xa0 [ 2454.540059][ T5295] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2454.559670][ T5295] RSP: 0018:ffffc9000429fbb8 EFLAGS: 00010202 [ 2454.565731][ T5295] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2454.573697][ T5295] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2454.581682][ T5295] RBP: ffffc9000429fe58 R08: ffffffff819810e6 R09: 0001c9000429fe57 [ 2454.589639][ T5295] R10: 0000000000000004 R11: ffff88814d76c040 R12: 0000000020020380 [ 2454.597595][ T5295] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2454.605599][ T5295] ? clear_user+0x36/0xa0 [ 2454.609927][ T5295] ? clear_user+0x48/0xa0 [ 2454.614265][ T5295] iov_iter_zero+0x11b/0xb20 [ 2454.618936][ T5295] ? should_fail+0xd6/0x250 [ 2454.623433][ T5295] read_iter_zero+0x63/0x180 [ 2454.628028][ T5295] do_iter_readv_writev+0x2fb/0x380 [ 2454.633236][ T5295] do_iter_read+0x192/0x5d0 [ 2454.637743][ T5295] ? import_iovec+0x69/0x80 [ 2454.642243][ T5295] do_readv+0x171/0x2c0 [ 2454.646400][ T5295] ? vfs_write+0x61a/0x900 [ 2454.650850][ T5295] __x64_sys_readv+0x41/0x50 16:10:23 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xbd15, &(0x7f0000000240)=[r3, r3, r3, r0, r7, r3, r8], 0x7, 0x0, 0x1, {0x0, r9}}, 0x7fff) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2454.655442][ T5295] do_syscall_64+0x44/0xa0 [ 2454.659878][ T5295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2454.665773][ T5295] RIP: 0033:0x7f4fc1ace709 [ 2454.670181][ T5295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.689787][ T5295] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2454.698198][ T5295] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2454.706166][ T5295] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2454.714164][ T5295] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.722211][ T5295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.730173][ T5295] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:23 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r5 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, 0x0, 0x1, {0x0, r8}}, 0xffffffff) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 46) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:23 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) chown(&(0x7f0000000180)='./file0\x00', 0xee00, r7) recvmmsg(r6, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)=""/4096, 0x1000}, 0xa32}, {{0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)=""/75, 0x4b}, 0x8000}, {{&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001600)=""/255, 0xff}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/198, 0xc6}, {&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000002900)=""/226, 0xe2}, {&(0x7f0000002a00)=""/97, 0x61}, {&(0x7f0000002a80)=""/201, 0xc9}], 0x7}, 0x800}, {{&(0x7f0000002c00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c80)=""/32, 0x20}], 0x1}, 0x8}, {{&(0x7f0000002d00)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/146, 0x92}, {&(0x7f0000002e40)=""/171, 0xab}], 0x2}, 0x1}, {{&(0x7f0000002f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/106, 0x6a}, {&(0x7f0000004040)=""/191, 0xbf}, {&(0x7f0000004100)=""/167, 0xa7}], 0x4, &(0x7f0000004200)=""/66, 0x42}, 0x9}, {{&(0x7f0000004280)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004340), 0x0, &(0x7f0000004380)}, 0x4}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000043c0)}, {&(0x7f0000004400)=""/107, 0x6b}, {&(0x7f0000004480)=""/128, 0x80}, {&(0x7f0000004540)=""/181, 0xb5}, {&(0x7f0000004600)=""/73, 0x49}, {&(0x7f0000004680)=""/128, 0x80}], 0x6, &(0x7f0000004780)=""/206, 0xce}, 0xffff}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000004880)=""/245, 0xf5}], 0x1}, 0xfffffff4}, {{&(0x7f00000049c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000004a40)=""/181, 0xb5}, 0x7}], 0xa, 0x21, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000004f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004d80)={0x104, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf08fb5415184db1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004009}, 0x10) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r0, 0x40, {0x0, r5}, 0x1, 0x8, 0x1, {0x0, 0x0, r0}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x401) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ee6000/0x2000)=nil, 0x2000, 0x16, 0x1, {0x0, r6}}, 0x8) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:23 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2454.883887][ T5322] FAULT_INJECTION: forcing a failure. [ 2454.883887][ T5322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2454.897217][ T5322] CPU: 1 PID: 5322 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2454.907280][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.917359][ T5322] Call Trace: [ 2454.920650][ T5322] dump_stack_lvl+0xd6/0x122 [ 2454.925297][ T5322] dump_stack+0x11/0x1b [ 2454.929455][ T5322] should_fail+0x23c/0x250 [ 2454.933870][ T5322] __alloc_pages+0x102/0x320 [ 2454.938470][ T5322] alloc_pages+0x382/0x3d0 [ 2454.942902][ T5322] __page_cache_alloc+0x4d/0xf0 [ 2454.947754][ T5322] page_cache_ra_unbounded+0x1be/0x430 [ 2454.953228][ T5322] ondemand_readahead+0x58c/0x7c0 [ 2454.958507][ T5322] page_cache_async_ra+0x17e/0x1a0 [ 2454.963615][ T5322] do_async_mmap_readahead+0x211/0x250 [ 2454.969076][ T5322] filemap_fault+0x106/0x9f0 [ 2454.973667][ T5322] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2454.980013][ T5322] ? cgroup_rstat_updated+0x34/0x100 [ 2454.985303][ T5322] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2454.990848][ T5322] handle_mm_fault+0xc81/0x1580 [ 2454.995698][ T5322] do_user_addr_fault+0x609/0xbe0 [ 2455.000800][ T5322] exc_page_fault+0x91/0x220 [ 2455.005407][ T5322] asm_exc_page_fault+0x1e/0x30 [ 2455.010260][ T5322] RIP: 0010:clear_user+0x60/0xa0 [ 2455.015200][ T5322] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2455.034804][ T5322] RSP: 0018:ffffc900041e3bb8 EFLAGS: 00010202 [ 2455.040865][ T5322] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2455.048979][ T5322] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2455.057017][ T5322] RBP: ffffc900041e3e58 R08: ffffffff819810e6 R09: 0001c900041e3e57 [ 2455.064979][ T5322] R10: 0000000000000004 R11: ffff88812acec080 R12: 0000000020020380 [ 2455.072938][ T5322] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2455.080900][ T5322] ? clear_user+0x36/0xa0 [ 2455.085296][ T5322] ? clear_user+0x48/0xa0 [ 2455.089643][ T5322] iov_iter_zero+0x11b/0xb20 [ 2455.094225][ T5322] ? should_fail+0xd6/0x250 [ 2455.098722][ T5322] read_iter_zero+0x63/0x180 [ 2455.103351][ T5322] do_iter_readv_writev+0x2fb/0x380 [ 2455.108582][ T5322] do_iter_read+0x192/0x5d0 [ 2455.113136][ T5322] ? import_iovec+0x69/0x80 [ 2455.117685][ T5322] do_readv+0x171/0x2c0 [ 2455.121846][ T5322] ? vfs_write+0x61a/0x900 [ 2455.126289][ T5322] __x64_sys_readv+0x41/0x50 [ 2455.130962][ T5322] do_syscall_64+0x44/0xa0 [ 2455.135431][ T5322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2455.141378][ T5322] RIP: 0033:0x7f4fc1ace709 [ 2455.145787][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.165391][ T5322] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2455.173825][ T5322] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:23 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2455.181790][ T5322] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2455.189760][ T5322] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2455.197719][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2455.205689][ T5322] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:24 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 47) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:24 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x2, 0x0, 0x0, 0x8}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x57}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2455.389302][ T5368] FAULT_INJECTION: forcing a failure. [ 2455.389302][ T5368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2455.402722][ T5368] CPU: 0 PID: 5368 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2455.412791][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.423157][ T5368] Call Trace: [ 2455.426433][ T5368] dump_stack_lvl+0xd6/0x122 [ 2455.431099][ T5368] dump_stack+0x11/0x1b [ 2455.435438][ T5368] should_fail+0x23c/0x250 16:10:24 executing program 1: r0 = syz_io_uring_setup(0x495c, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xb80, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r8, &(0x7f0000000240)={0x2000, 0x111, 0xc}, &(0x7f0000000280)='./file0/file0\x00', 0x18, 0x0, 0x23456, {0x0, r9}}, 0x9) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:24 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x2}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2455.439858][ T5368] __alloc_pages+0x102/0x320 [ 2455.444520][ T5368] alloc_pages+0x382/0x3d0 [ 2455.448947][ T5368] __page_cache_alloc+0x4d/0xf0 [ 2455.453797][ T5368] page_cache_ra_unbounded+0x1be/0x430 [ 2455.459334][ T5368] ondemand_readahead+0x58c/0x7c0 [ 2455.464384][ T5368] page_cache_async_ra+0x17e/0x1a0 [ 2455.469502][ T5368] do_async_mmap_readahead+0x211/0x250 [ 2455.474973][ T5368] filemap_fault+0x106/0x9f0 [ 2455.479643][ T5368] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2455.486009][ T5368] ? cgroup_rstat_updated+0x34/0x100 [ 2455.491297][ T5368] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2455.496843][ T5368] handle_mm_fault+0xc81/0x1580 [ 2455.501814][ T5368] do_user_addr_fault+0x609/0xbe0 [ 2455.506834][ T5368] exc_page_fault+0x91/0x220 [ 2455.511421][ T5368] asm_exc_page_fault+0x1e/0x30 [ 2455.516281][ T5368] RIP: 0010:clear_user+0x60/0xa0 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2455.521226][ T5368] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2455.540953][ T5368] RSP: 0018:ffffc9000444fbb8 EFLAGS: 00010202 [ 2455.547090][ T5368] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2455.555063][ T5368] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2455.563057][ T5368] RBP: ffffc9000444fe58 R08: ffffffff819810e6 R09: 0001c9000444fe57 [ 2455.571025][ T5368] R10: 0000000000000004 R11: ffff888150b62040 R12: 0000000020020380 [ 2455.579084][ T5368] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2455.587053][ T5368] ? clear_user+0x36/0xa0 [ 2455.591385][ T5368] ? clear_user+0x48/0xa0 [ 2455.595717][ T5368] iov_iter_zero+0x11b/0xb20 [ 2455.600353][ T5368] ? should_fail+0xd6/0x250 [ 2455.604857][ T5368] read_iter_zero+0x63/0x180 [ 2455.609499][ T5368] do_iter_readv_writev+0x2fb/0x380 [ 2455.614703][ T5368] do_iter_read+0x192/0x5d0 [ 2455.619209][ T5368] ? import_iovec+0x69/0x80 [ 2455.623722][ T5368] do_readv+0x171/0x2c0 [ 2455.627883][ T5368] ? vfs_write+0x61a/0x900 [ 2455.632300][ T5368] __x64_sys_readv+0x41/0x50 [ 2455.636936][ T5368] do_syscall_64+0x44/0xa0 [ 2455.641352][ T5368] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2455.647396][ T5368] RIP: 0033:0x7f4fc1ace709 [ 2455.651806][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.671414][ T5368] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2455.679826][ T5368] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2455.687791][ T5368] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2455.695812][ T5368] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2455.703785][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2455.711779][ T5368] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:24 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 48) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:24 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7503, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x5, 0x8, 0x5, 0x5, 0x8, 0x0, {0x3}}, 0x401) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd, 0x1, 0x7, 0xca, 0x1, 0x1}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:24 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x369a, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x51e, &(0x7f0000000240)={0x0, 0x75e6, 0x8, 0x2, 0x35d, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x20010, r0, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x4, 0x2}, 0x401) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:24 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2455.814272][ T5407] FAULT_INJECTION: forcing a failure. [ 2455.814272][ T5407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2455.827527][ T5407] CPU: 0 PID: 5407 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2455.837592][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.847651][ T5407] Call Trace: [ 2455.850928][ T5407] dump_stack_lvl+0xd6/0x122 [ 2455.855561][ T5407] dump_stack+0x11/0x1b [ 2455.859717][ T5407] should_fail+0x23c/0x250 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2455.864139][ T5407] __alloc_pages+0x102/0x320 [ 2455.868825][ T5407] alloc_pages+0x382/0x3d0 [ 2455.873324][ T5407] __page_cache_alloc+0x4d/0xf0 [ 2455.878182][ T5407] page_cache_ra_unbounded+0x1be/0x430 [ 2455.883646][ T5407] ondemand_readahead+0x58c/0x7c0 [ 2455.888818][ T5407] page_cache_async_ra+0x17e/0x1a0 [ 2455.894008][ T5407] do_async_mmap_readahead+0x211/0x250 [ 2455.899528][ T5407] filemap_fault+0x106/0x9f0 [ 2455.904154][ T5407] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:24 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2455.910528][ T5407] ? cgroup_rstat_updated+0x34/0x100 [ 2455.915881][ T5407] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2455.921436][ T5407] handle_mm_fault+0xc81/0x1580 [ 2455.926290][ T5407] do_user_addr_fault+0x609/0xbe0 [ 2455.931324][ T5407] exc_page_fault+0x91/0x220 [ 2455.935950][ T5407] asm_exc_page_fault+0x1e/0x30 [ 2455.940804][ T5407] RIP: 0010:clear_user+0x60/0xa0 16:10:24 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) signalfd(r0, &(0x7f0000000440)={[0x3]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r0, r5, r5, r0], 0x4, 0x0, 0x1}, 0xbc1) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2455.945854][ T5407] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2455.965601][ T5407] RSP: 0018:ffffc9000444fbb8 EFLAGS: 00010202 [ 2455.971668][ T5407] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2455.979637][ T5407] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2455.987606][ T5407] RBP: ffffc9000444fe58 R08: ffffffff819810e6 R09: 0001c9000444fe57 [ 2455.995586][ T5407] R10: 0000000000000004 R11: ffff88814d76c040 R12: 0000000020020380 [ 2456.003555][ T5407] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2456.011530][ T5407] ? clear_user+0x36/0xa0 [ 2456.015973][ T5407] ? clear_user+0x48/0xa0 [ 2456.020333][ T5407] iov_iter_zero+0x11b/0xb20 [ 2456.024969][ T5407] ? should_fail+0xd6/0x250 [ 2456.029502][ T5407] read_iter_zero+0x63/0x180 [ 2456.034118][ T5407] do_iter_readv_writev+0x2fb/0x380 [ 2456.039394][ T5407] do_iter_read+0x192/0x5d0 [ 2456.043898][ T5407] ? import_iovec+0x69/0x80 [ 2456.048400][ T5407] do_readv+0x171/0x2c0 [ 2456.052633][ T5407] ? vfs_write+0x61a/0x900 [ 2456.057117][ T5407] __x64_sys_readv+0x41/0x50 16:10:25 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006da000/0x1000)=nil, 0x1000, 0x4, 0x110, r0, 0x10000000) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r1, r5, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x5, @remote, 0x9}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="33be691aa3e163767f", 0x9}, {&(0x7f0000000380)="fe8bfeac6d0b69b3e71dec063a911e5c70dd4bb697d45333205699fd5a871294bda215aeb95816babb89a53e4455df3b04fafbfc4d4bd66e0748642a2e32d154deb3ab01da57ebf38ff1ee3e761cb4bf36bd328eaed8cc03b346cb115bc760210c6e26426ba41656b40925e62dedd4a1238c2c77acb585a7dee915317b1c7f5c6893f630da18da3271cd87272e39806b35eac1", 0x93}, {&(0x7f0000000480)="5146fb7238273232994c6efe045864943a7085c0bbb74314f6034bbace8282a8f258b8d7dba076046ecd5ec2dcbd3cbb1c86e4ba0d22ffe8503e611c9001c058ccfaf5709f10bff6f15e7a28208e8044221d813935864652a83a3f78c83ef680f1222feb0ad2eb29e060b836246b8a3651cc7ef2f439d70a24c7b30b02cca87db05858617b83af962331a1a7ec1d2b5f82094a78e780f9d8821e52eff0eb55a2ead957b1bc88b92face1c2dbf9afb7b4f52adac5e4a775776ca5bf1219d7b35a61627d3d27bac97cdd457fbe18b41781efcdbb9b8bbddc4e1d0d4f9dbfc782f312e14d5511e0d59fe90f13ad0e124867", 0xf0}, {&(0x7f0000000580)="f0eb2ccaf5a581a2b57560a44d4683da34db1b4c9a70c62bf713e680ac42f2131b64958a207a35e87048ae5ff2671abba2c43a842d9f0e9f46d22f811f9592b8676275b3aecaef605c4dfab17a5f760741db7217bae1d508ab3052572c056ef9d0bfc4339ecadbb8f5aea798fb9fa1926bf6ee929ace55e1c26ca72a75a8d6f0a8fea6271be9612d9c59c34332cc9cfc48c1c57e5bcbf57993a05a801e63952d059d3e547f61fe9dbf458bb1e22ad142969c0a1bff3f539c07471f04b2d9e710393298c9f89ca4df7ee42d6d20cf980b3d3b63ad010a6b30bebe87e21c0e487f6a43614be8d84e23cb75b0886b", 0xed}], 0x4}, 0x0, 0x4, 0x0, {0x0, r9}}, 0x6) r10 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2456.061703][ T5407] do_syscall_64+0x44/0xa0 [ 2456.066159][ T5407] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2456.072219][ T5407] RIP: 0033:0x7f4fc1ace709 [ 2456.076632][ T5407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.096274][ T5407] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2456.104685][ T5407] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:25 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2456.112653][ T5407] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2456.120619][ T5407] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.128589][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.136561][ T5407] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:25 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 49) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:25 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x4f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00'}, 0xae) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x200) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40008001) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x30}, 0x20, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:25 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x346d, &(0x7f0000000080)={0x0, 0x200}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:25 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:25 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ee5000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x28}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r8, &(0x7f00000001c0), 0x0, 0x0, 0x2) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x100, 0xb3fb068cda99d9e1, 0x1}, 0x81) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7ff) 16:10:25 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r6 = accept(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000003c0)=0x80) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r5, 0x4, {0x0, r6}, 0x6, 0x5, 0x1, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2456.360788][ T5467] FAULT_INJECTION: forcing a failure. [ 2456.360788][ T5467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2456.374048][ T5467] CPU: 0 PID: 5467 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2456.384113][ T5467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.394165][ T5467] Call Trace: [ 2456.397438][ T5467] dump_stack_lvl+0xd6/0x122 [ 2456.402088][ T5467] dump_stack+0x11/0x1b [ 2456.406247][ T5467] should_fail+0x23c/0x250 16:10:25 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0xfffffffffffffff8, 0x313400) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0xe1, 0x1, 0x4, 0x0, @mcast1, @mcast1, 0x0, 0x8000, 0x200, 0x8}}) accept$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x2f, 0x2, 0xea, 0x5, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x700, 0x20, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0xf8, 0x4, 0x19, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8080, 0x6}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe8, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2456.410669][ T5467] __alloc_pages+0x102/0x320 [ 2456.415312][ T5467] alloc_pages+0x382/0x3d0 [ 2456.419741][ T5467] __page_cache_alloc+0x4d/0xf0 [ 2456.424608][ T5467] page_cache_ra_unbounded+0x1be/0x430 [ 2456.430064][ T5467] ondemand_readahead+0x58c/0x7c0 [ 2456.435089][ T5467] page_cache_async_ra+0x17e/0x1a0 [ 2456.440203][ T5467] do_async_mmap_readahead+0x211/0x250 [ 2456.445680][ T5467] filemap_fault+0x106/0x9f0 [ 2456.450347][ T5467] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2456.456773][ T5467] ? cgroup_rstat_updated+0x34/0x100 [ 2456.462082][ T5467] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2456.467712][ T5467] handle_mm_fault+0xc81/0x1580 [ 2456.472568][ T5467] do_user_addr_fault+0x609/0xbe0 [ 2456.477589][ T5467] exc_page_fault+0x91/0x220 [ 2456.482177][ T5467] asm_exc_page_fault+0x1e/0x30 [ 2456.487032][ T5467] RIP: 0010:clear_user+0x60/0xa0 [ 2456.491968][ T5467] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a 16:10:25 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2456.511673][ T5467] RSP: 0018:ffffc9000467bbb8 EFLAGS: 00010202 [ 2456.517735][ T5467] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2456.525701][ T5467] RDX: ffffc9000f42d000 RSI: 0000000000002d5f RDI: 0000000020020000 [ 2456.533677][ T5467] RBP: ffffc9000467be58 R08: ffffffff819810e6 R09: 0001c9000467be57 [ 2456.541646][ T5467] R10: 0000000000000004 R11: ffff888148c13040 R12: 0000000020020380 [ 2456.549618][ T5467] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2456.557593][ T5467] ? clear_user+0x36/0xa0 [ 2456.561922][ T5467] ? clear_user+0x48/0xa0 [ 2456.566248][ T5467] iov_iter_zero+0x11b/0xb20 [ 2456.570841][ T5467] ? should_fail+0xd6/0x250 [ 2456.575357][ T5467] read_iter_zero+0x63/0x180 [ 2456.579952][ T5467] do_iter_readv_writev+0x2fb/0x380 [ 2456.585229][ T5467] do_iter_read+0x192/0x5d0 [ 2456.589774][ T5467] ? import_iovec+0x69/0x80 [ 2456.594307][ T5467] do_readv+0x171/0x2c0 [ 2456.598466][ T5467] ? vfs_write+0x61a/0x900 [ 2456.603019][ T5467] __x64_sys_readv+0x41/0x50 [ 2456.607622][ T5467] do_syscall_64+0x44/0xa0 [ 2456.612048][ T5467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2456.617949][ T5467] RIP: 0033:0x7f4fc1ace709 [ 2456.622361][ T5467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.641968][ T5467] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2456.650379][ T5467] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2456.658386][ T5467] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2456.666352][ T5467] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.674323][ T5467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.682288][ T5467] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:25 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 50) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:25 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:25 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$9p_xen(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0x8000, &(0x7f0000002b00)={'trans=xen,', {[{@version_9p2000}, {@access_uid}, {@access_user}, {@dfltuid}, {@access_user}, {@msize={'msize', 0x3d, 0x8}}, {@loose}], [{@uid_lt={'uid<', r6}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) sendmsg(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80, &(0x7f0000002940)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="0cfd3bc33e37672b67c6ef249683f36a3782ca73359a99f654c80d6ead67e5f7449ab73cf4045caa4a255f5ba95b0e7c0656f1e3ddb1b261db92cea4ea2d60ae54eaf6bd556189", 0x47}, {&(0x7f0000001440)="19487010402893a4e065db9ae07c6475ea3d422abc58f0a04e258b717685041df49d24ad251adceedc17ded1c780591829da15c821c97be62a13ae05cbabf813ff4aeff1dc8800a4569ce58d30bcf2c57c9b7cf0e8b0f1ebb50990edd751d0e8439ab7dd2179d818455633dadd4bf3e5dd04aeacb252471d0394e861380d98f6", 0x80}, {&(0x7f0000001500)="3a3ce49b012084c847c359c3f441b0daeb4cbcf01529bd45d50a6034a9c75699560549f88db2b234ff24e866929ce691ca57b48e158c96ca29e182", 0x3b}, {&(0x7f0000001540)="2366ca9a76bbaf054e5ee98f3f6aa508430cc037052d58da0e944fee534166f61efbed739a08cbe83871e5b8d636effaa3b681504db64e03af1427a28e563d7581da2417345f073b225f025fa9660c86fca75bc84406116e9abd607ce2f538bbd2d24246a974478e68b93330988495553a5f29669aac8751449ea1f3048d386fa02b2e470dc07ef125f756a70126eda1069a31da141eec43ef5097887c2ecd3715d7178ce05022d018c1f3119e2bc584ab914333", 0xb4}, {&(0x7f0000001600)="9743c19055fd6fcf8b93f01855231a0a3a397b331d73b74bb891c313111bf4489c6b0fbe2e154e648943ae47984d46261098b4862a03450cf7172f2a74a75303a201482c3ed5d9f9214d04f960a2af021d8953e0584b9e4a1c538e227670b901e3d3aa55a86ce5a38f257de4932e81347711ea68c617395ec441f83534c2c354ab1eb0d9f3c94c623c4c238a4eba607611276f72c2e36a5660ff5fa96c24329acb7959c72ec67056311d809bc600c7d184a3355756d0aa02a6693ab8398a432b83826d16dd7abde3f0", 0xc9}, {&(0x7f0000001700)="a56df19d6a2ff65102ce975cdc59ce8cdc9bf7b63c478680c897823f361117da5a6eb9ff521f8a3113ecf1190b793f94707d819f485b89387815bb1f63a958b75e1034b0e076148911af1699a9a05c12e1d00a441ee93f47de1587b696a8829f9c11bf4ae581f93f7a20dacbff", 0x6d}, {&(0x7f0000001780)="f88938fb2fa0858bd7fbeb88a7aef451a34dc09959d5db257731bbb6fecffab74ba8bfb39705ea8bedf141ef4c588dcb061272d986ac1b6eae6b6027536a10caa08343abf2bde6f5c8fac100b55d97fd7f2c507606df1ed5c25a5be949ce167a3fddcfec0ddc5051f448721f7ac6caf92027d338e82963e806986b79993edeb8a0f458a1df18f223aa9737a021a256ad5342562b64f4", 0x96}, {&(0x7f0000001840)="146ab886a781e7ba5bbbf44d7f5698e0580c0cdeb77ee6c13ba333d89b49e52a2fa3093cde6ddf1f607f27990f7f06140925adebddbb853de4c41008028ebad0fdaa115ac2d2bf510a9785f47e17088e9ee7853ad5cea320a24efc691540e748050328bd30d95cb4bbfe033a361981bba9ee12e0d71dbf7648ac0914f094962a02c1703439f12897771658dc1b663023e601474aefe84fdb65b2faed133908ffa43cfa800f6c9ee6fa5a0e45956a4984fdd0ea6a01b1a817e7a95343a64311f90e07b818e5880ca5d22ff3774e0b5cab9b537d374ec7771ceedfec7560bca99c93928f7208e8416ada29b70c", 0xec}, {&(0x7f0000001940)="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", 0x1000}], 0xa}, 0x80) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10002) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r7 = syz_io_uring_setup(0xc4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x401) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x200, 0x800, 0x1, {0x0, r10}}, 0x6) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:25 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x30000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:25 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) socketpair(0x13, 0x4, 0x5, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x4800) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x101, &(0x7f00000004c0)=[r4, r0, r0, r5, r6], 0x5}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/243, 0xf3}], 0x2, 0x0, 0xffff) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2151, &(0x7f0000000240)={0x0, 0x34b, 0x1, 0x1, 0x68, 0x0, r0}, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2456.851762][ T5504] FAULT_INJECTION: forcing a failure. [ 2456.851762][ T5504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2456.865018][ T5504] CPU: 0 PID: 5504 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2456.875076][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.885245][ T5504] Call Trace: [ 2456.888509][ T5504] dump_stack_lvl+0xd6/0x122 [ 2456.893168][ T5504] dump_stack+0x11/0x1b [ 2456.897309][ T5504] should_fail+0x23c/0x250 [ 2456.901733][ T5504] __alloc_pages+0x102/0x320 [ 2456.906313][ T5504] alloc_pages+0x382/0x3d0 [ 2456.910722][ T5504] __page_cache_alloc+0x4d/0xf0 [ 2456.915625][ T5504] page_cache_ra_unbounded+0x1be/0x430 [ 2456.921085][ T5504] ondemand_readahead+0x58c/0x7c0 [ 2456.926104][ T5504] page_cache_async_ra+0x17e/0x1a0 [ 2456.931218][ T5504] do_async_mmap_readahead+0x211/0x250 [ 2456.936704][ T5504] filemap_fault+0x106/0x9f0 [ 2456.941283][ T5504] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2456.947652][ T5504] ? cgroup_rstat_updated+0x34/0x100 [ 2456.952962][ T5504] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2456.958525][ T5504] handle_mm_fault+0xc81/0x1580 [ 2456.963362][ T5504] do_user_addr_fault+0x609/0xbe0 [ 2456.968372][ T5504] exc_page_fault+0x91/0x220 [ 2456.973154][ T5504] asm_exc_page_fault+0x1e/0x30 [ 2456.978014][ T5504] RIP: 0010:clear_user+0x60/0xa0 [ 2456.982941][ T5504] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2457.002533][ T5504] RSP: 0018:ffffc90004743bb8 EFLAGS: 00010202 [ 2457.008620][ T5504] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2457.016580][ T5504] RDX: ffffc9000f42d000 RSI: 0000000000002d5f RDI: 0000000020020000 [ 2457.024546][ T5504] RBP: ffffc90004743e58 R08: ffffffff819810e6 R09: 0001c90004743e57 [ 2457.032562][ T5504] R10: 0000000000000004 R11: ffff888109b9e040 R12: 0000000020020380 [ 2457.040578][ T5504] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2457.048536][ T5504] ? clear_user+0x36/0xa0 [ 2457.052878][ T5504] ? clear_user+0x48/0xa0 [ 2457.057200][ T5504] iov_iter_zero+0x11b/0xb20 [ 2457.061794][ T5504] ? should_fail+0xd6/0x250 [ 2457.066283][ T5504] read_iter_zero+0x63/0x180 [ 2457.070891][ T5504] do_iter_readv_writev+0x2fb/0x380 [ 2457.076083][ T5504] do_iter_read+0x192/0x5d0 [ 2457.080581][ T5504] ? import_iovec+0x69/0x80 [ 2457.085071][ T5504] do_readv+0x171/0x2c0 [ 2457.089216][ T5504] ? vfs_write+0x61a/0x900 [ 2457.093621][ T5504] __x64_sys_readv+0x41/0x50 [ 2457.098230][ T5504] do_syscall_64+0x44/0xa0 [ 2457.102651][ T5504] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2457.108581][ T5504] RIP: 0033:0x7f4fc1ace709 [ 2457.113007][ T5504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.132641][ T5504] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2457.141043][ T5504] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:26 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:26 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2457.149011][ T5504] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2457.156967][ T5504] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.164921][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.172878][ T5504] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:26 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d9000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x2, 0x0, 0x800, 0x0, 0x1}, 0x6) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x800000, 0x20010, r8, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:26 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 51) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:26 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r5 = syz_io_uring_setup(0x34d9, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1}, 0x800) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) fcntl$dupfd(r5, 0x406, r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) io_uring_enter(0xffffffffffffffff, 0x1006375, 0x90b5, 0x2, 0x0, 0xfffffffffffffd8e) 16:10:26 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/131, 0x83}], 0x3, &(0x7f0000000740)=""/76, 0x4c}, 0x0, 0x40000020, 0x0, {0x3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x10000000) r2 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x8) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x10000000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000240)) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x6}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x802}}, 0xfffffffc) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x8c, 0x74b7, 0x1, &(0x7f0000000180)={[0x7f]}, 0x8) 16:10:26 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x31000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:26 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 0: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_setup(0x3fa7, &(0x7f00000003c0)={0x0, 0x2628, 0x0, 0x3, 0x180, 0x0, r4}, &(0x7f00000db000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) fcntl$dupfd(r4, 0x406, r0) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x1, 0xe}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0x3, 0x0, 0x4, 0x0, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2457.496153][ T5555] FAULT_INJECTION: forcing a failure. [ 2457.496153][ T5555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2457.509472][ T5555] CPU: 1 PID: 5555 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2457.519556][ T5555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.529631][ T5555] Call Trace: [ 2457.532934][ T5555] dump_stack_lvl+0xd6/0x122 [ 2457.537567][ T5555] dump_stack+0x11/0x1b [ 2457.541723][ T5555] should_fail+0x23c/0x250 [ 2457.546151][ T5555] __alloc_pages+0x102/0x320 [ 2457.550737][ T5555] alloc_pages+0x382/0x3d0 [ 2457.555150][ T5555] __page_cache_alloc+0x4d/0xf0 [ 2457.560009][ T5555] page_cache_ra_unbounded+0x1be/0x430 [ 2457.565477][ T5555] ondemand_readahead+0x58c/0x7c0 [ 2457.570504][ T5555] page_cache_async_ra+0x17e/0x1a0 [ 2457.575747][ T5555] do_async_mmap_readahead+0x211/0x250 [ 2457.581237][ T5555] filemap_fault+0x106/0x9f0 [ 2457.585903][ T5555] ? balance_dirty_pages_ratelimited+0x241/0x2a0 16:10:26 executing program 2: lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:26 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2457.592233][ T5555] ? cgroup_rstat_updated+0x34/0x100 [ 2457.597600][ T5555] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2457.603210][ T5555] handle_mm_fault+0xc81/0x1580 [ 2457.608131][ T5555] do_user_addr_fault+0x609/0xbe0 [ 2457.613154][ T5555] exc_page_fault+0x91/0x220 [ 2457.617739][ T5555] asm_exc_page_fault+0x1e/0x30 [ 2457.622595][ T5555] RIP: 0010:clear_user+0x60/0xa0 16:10:26 executing program 2: lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2457.627530][ T5555] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2457.647137][ T5555] RSP: 0018:ffffc9000485bbb8 EFLAGS: 00010202 [ 2457.653197][ T5555] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2457.661226][ T5555] RDX: ffffc9000f42d000 RSI: 0000000000002d5f RDI: 0000000020020000 [ 2457.669191][ T5555] RBP: ffffc9000485be58 R08: ffffffff819810e6 R09: 0001c9000485be57 [ 2457.677154][ T5555] R10: 0000000000000004 R11: ffff88814303f040 R12: 0000000020020380 [ 2457.685184][ T5555] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2457.693239][ T5555] ? clear_user+0x36/0xa0 [ 2457.697565][ T5555] ? clear_user+0x48/0xa0 [ 2457.701980][ T5555] iov_iter_zero+0x11b/0xb20 [ 2457.706566][ T5555] ? should_fail+0xd6/0x250 [ 2457.711067][ T5555] read_iter_zero+0x63/0x180 [ 2457.715654][ T5555] do_iter_readv_writev+0x2fb/0x380 [ 2457.720892][ T5555] do_iter_read+0x192/0x5d0 [ 2457.725484][ T5555] ? import_iovec+0x69/0x80 [ 2457.730160][ T5555] do_readv+0x171/0x2c0 [ 2457.734329][ T5555] ? vfs_write+0x61a/0x900 [ 2457.738748][ T5555] __x64_sys_readv+0x41/0x50 [ 2457.743405][ T5555] do_syscall_64+0x44/0xa0 [ 2457.747831][ T5555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2457.753778][ T5555] RIP: 0033:0x7f4fc1ace709 [ 2457.758172][ T5555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.777881][ T5555] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2457.786311][ T5555] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2457.794265][ T5555] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2457.802231][ T5555] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.810182][ T5555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.818132][ T5555] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:26 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 52) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:26 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 2: lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:26 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x30000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:26 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r7 = syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0xa80d, 0x0, 0x0, 0x123}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x401) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r10}}, 0x20000000) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:26 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x32000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:27 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0xc30, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_setup(0xb5a, &(0x7f0000000240)={0x0, 0x8f38, 0x10, 0x1, 0x22, 0x0, r0}, &(0x7f00000da000/0x4000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000380)) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_setup(0x7c4a, &(0x7f00000003c0)={0x0, 0xafe4, 0x0, 0x0, 0x55, 0x0, r3}, &(0x7f00006d9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r7, r4, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0xfffffffa) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x2, 0x0, 0x0, 0x0) [ 2457.953973][ T5592] FAULT_INJECTION: forcing a failure. [ 2457.953973][ T5592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2457.967350][ T5592] CPU: 1 PID: 5592 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2457.977476][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.987555][ T5592] Call Trace: [ 2457.990860][ T5592] dump_stack_lvl+0xd6/0x122 [ 2457.995456][ T5592] dump_stack+0x11/0x1b [ 2457.999683][ T5592] should_fail+0x23c/0x250 [ 2458.004101][ T5592] __alloc_pages+0x102/0x320 [ 2458.008695][ T5592] alloc_pages+0x382/0x3d0 [ 2458.013120][ T5592] __page_cache_alloc+0x4d/0xf0 [ 2458.017971][ T5592] page_cache_ra_unbounded+0x1be/0x430 [ 2458.023431][ T5592] ondemand_readahead+0x58c/0x7c0 [ 2458.028672][ T5592] page_cache_async_ra+0x17e/0x1a0 [ 2458.033855][ T5592] do_async_mmap_readahead+0x211/0x250 [ 2458.039394][ T5592] filemap_fault+0x106/0x9f0 [ 2458.044034][ T5592] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2458.050360][ T5592] ? cgroup_rstat_updated+0x34/0x100 [ 2458.055735][ T5592] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2458.061285][ T5592] handle_mm_fault+0xc81/0x1580 [ 2458.066195][ T5592] do_user_addr_fault+0x609/0xbe0 [ 2458.071266][ T5592] exc_page_fault+0x91/0x220 [ 2458.075889][ T5592] asm_exc_page_fault+0x1e/0x30 [ 2458.080779][ T5592] RIP: 0010:clear_user+0x60/0xa0 [ 2458.085728][ T5592] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2458.105415][ T5592] RSP: 0018:ffffc9000485bbb8 EFLAGS: 00010202 [ 2458.111583][ T5592] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2458.119554][ T5592] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2458.127520][ T5592] RBP: ffffc9000485be58 R08: ffffffff819810e6 R09: 0001c9000485be57 [ 2458.135486][ T5592] R10: 0000000000000004 R11: ffff88814303f040 R12: 0000000020020380 [ 2458.143446][ T5592] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2458.151426][ T5592] ? clear_user+0x36/0xa0 [ 2458.155754][ T5592] ? clear_user+0x48/0xa0 [ 2458.160073][ T5592] iov_iter_zero+0x11b/0xb20 [ 2458.164651][ T5592] ? should_fail+0xd6/0x250 [ 2458.169186][ T5592] read_iter_zero+0x63/0x180 [ 2458.173776][ T5592] do_iter_readv_writev+0x2fb/0x380 [ 2458.179050][ T5592] do_iter_read+0x192/0x5d0 [ 2458.183550][ T5592] ? import_iovec+0x69/0x80 [ 2458.188060][ T5592] do_readv+0x171/0x2c0 [ 2458.192221][ T5592] ? vfs_write+0x61a/0x900 [ 2458.196692][ T5592] __x64_sys_readv+0x41/0x50 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2458.201459][ T5592] do_syscall_64+0x44/0xa0 [ 2458.205881][ T5592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2458.211778][ T5592] RIP: 0033:0x7f4fc1ace709 [ 2458.216186][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.235790][ T5592] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2458.244202][ T5592] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2458.252166][ T5592] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2458.260134][ T5592] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.268120][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.276082][ T5592] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:27 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6373, 0x4, 0x0, 0x0, 0x0) 16:10:27 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 53) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:27 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x33000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2458.418308][ T5635] FAULT_INJECTION: forcing a failure. [ 2458.418308][ T5635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2458.431583][ T5635] CPU: 0 PID: 5635 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2458.441661][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.451713][ T5635] Call Trace: [ 2458.454993][ T5635] dump_stack_lvl+0xd6/0x122 [ 2458.459598][ T5635] dump_stack+0x11/0x1b [ 2458.463752][ T5635] should_fail+0x23c/0x250 16:10:27 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x2000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:27 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x20000, 0x78, 0x4}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2458.468166][ T5635] __alloc_pages+0x102/0x320 [ 2458.472813][ T5635] alloc_pages+0x382/0x3d0 [ 2458.477235][ T5635] __page_cache_alloc+0x4d/0xf0 [ 2458.482093][ T5635] page_cache_ra_unbounded+0x1be/0x430 [ 2458.487548][ T5635] ondemand_readahead+0x58c/0x7c0 [ 2458.492669][ T5635] page_cache_async_ra+0x17e/0x1a0 [ 2458.497861][ T5635] do_async_mmap_readahead+0x211/0x250 [ 2458.503388][ T5635] filemap_fault+0x106/0x9f0 [ 2458.507978][ T5635] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2458.514320][ T5635] ? cgroup_rstat_updated+0x34/0x100 [ 2458.519655][ T5635] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2458.525262][ T5635] handle_mm_fault+0xc81/0x1580 [ 2458.530117][ T5635] do_user_addr_fault+0x609/0xbe0 [ 2458.535143][ T5635] exc_page_fault+0x91/0x220 [ 2458.539758][ T5635] asm_exc_page_fault+0x1e/0x30 [ 2458.544616][ T5635] RIP: 0010:clear_user+0x60/0xa0 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2458.549561][ T5635] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2458.569265][ T5635] RSP: 0018:ffffc90004997bb8 EFLAGS: 00010202 [ 2458.575332][ T5635] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2458.583366][ T5635] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2458.591347][ T5635] RBP: ffffc90004997e58 R08: ffffffff819810e6 R09: 0001c90004997e57 [ 2458.599318][ T5635] R10: 0000000000000004 R11: ffff888124f14040 R12: 0000000020020380 [ 2458.607289][ T5635] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:27 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r7 = syz_io_uring_setup(0x20d0, &(0x7f0000000240)={0x0, 0xa0cc, 0x2, 0x0, 0x208, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006db000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000380)) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) shutdown(r7, 0x1) [ 2458.615269][ T5635] ? clear_user+0x36/0xa0 [ 2458.619599][ T5635] ? clear_user+0x48/0xa0 [ 2458.623998][ T5635] iov_iter_zero+0x11b/0xb20 [ 2458.628682][ T5635] ? should_fail+0xd6/0x250 [ 2458.633187][ T5635] read_iter_zero+0x63/0x180 [ 2458.637859][ T5635] do_iter_readv_writev+0x2fb/0x380 [ 2458.643089][ T5635] do_iter_read+0x192/0x5d0 [ 2458.647659][ T5635] ? import_iovec+0x69/0x80 [ 2458.652217][ T5635] do_readv+0x171/0x2c0 [ 2458.656377][ T5635] ? vfs_write+0x61a/0x900 [ 2458.660799][ T5635] __x64_sys_readv+0x41/0x50 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2458.665395][ T5635] do_syscall_64+0x44/0xa0 [ 2458.669821][ T5635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2458.675726][ T5635] RIP: 0033:0x7f4fc1ace709 [ 2458.680162][ T5635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.699835][ T5635] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2458.708307][ T5635] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2458.716280][ T5635] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2458.724247][ T5635] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.732213][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.740186][ T5635] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:27 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 54) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:27 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2458.880813][ T5676] FAULT_INJECTION: forcing a failure. [ 2458.880813][ T5676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2458.894073][ T5676] CPU: 1 PID: 5676 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2458.904141][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.914194][ T5676] Call Trace: [ 2458.917468][ T5676] dump_stack_lvl+0xd6/0x122 [ 2458.922068][ T5676] dump_stack+0x11/0x1b [ 2458.926221][ T5676] should_fail+0x23c/0x250 [ 2458.930691][ T5676] __alloc_pages+0x102/0x320 [ 2458.935282][ T5676] alloc_pages+0x382/0x3d0 [ 2458.939696][ T5676] __page_cache_alloc+0x4d/0xf0 [ 2458.944615][ T5676] page_cache_ra_unbounded+0x1be/0x430 [ 2458.950076][ T5676] ondemand_readahead+0x58c/0x7c0 [ 2458.950374][ T5685] FAULT_INJECTION: forcing a failure. [ 2458.950374][ T5685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.955171][ T5676] page_cache_async_ra+0x17e/0x1a0 [ 2458.955198][ T5676] do_async_mmap_readahead+0x211/0x250 [ 2458.978713][ T5676] filemap_fault+0x106/0x9f0 [ 2458.983296][ T5676] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2458.989646][ T5676] ? cgroup_rstat_updated+0x34/0x100 [ 2458.994920][ T5676] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2459.000529][ T5676] handle_mm_fault+0xc81/0x1580 [ 2459.005371][ T5676] do_user_addr_fault+0x609/0xbe0 [ 2459.010461][ T5676] exc_page_fault+0x91/0x220 [ 2459.015034][ T5676] asm_exc_page_fault+0x1e/0x30 [ 2459.019891][ T5676] RIP: 0010:clear_user+0x60/0xa0 [ 2459.024817][ T5676] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2459.044405][ T5676] RSP: 0018:ffffc900049dfbb8 EFLAGS: 00010202 [ 2459.050452][ T5676] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2459.058430][ T5676] RDX: ffffc9000f42d000 RSI: 0000000000002d5f RDI: 0000000020020000 [ 2459.066383][ T5676] RBP: ffffc900049dfe58 R08: ffffffff819810e6 R09: 0001c900049dfe57 [ 2459.074339][ T5676] R10: 0000000000000004 R11: ffff888129416000 R12: 0000000020020380 [ 2459.082307][ T5676] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2459.090261][ T5676] ? clear_user+0x36/0xa0 [ 2459.094573][ T5676] ? clear_user+0x48/0xa0 [ 2459.098882][ T5676] iov_iter_zero+0x11b/0xb20 [ 2459.103455][ T5676] ? should_fail+0xd6/0x250 [ 2459.107962][ T5676] read_iter_zero+0x63/0x180 [ 2459.112537][ T5676] do_iter_readv_writev+0x2fb/0x380 [ 2459.117767][ T5676] do_iter_read+0x192/0x5d0 [ 2459.122290][ T5676] ? import_iovec+0x69/0x80 [ 2459.126787][ T5676] do_readv+0x171/0x2c0 [ 2459.130927][ T5676] ? vfs_write+0x61a/0x900 [ 2459.135341][ T5676] __x64_sys_readv+0x41/0x50 [ 2459.139920][ T5676] do_syscall_64+0x44/0xa0 [ 2459.144320][ T5676] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.150218][ T5676] RIP: 0033:0x7f4fc1ace709 [ 2459.154614][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:10:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 1) 16:10:27 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:27 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x34000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:27 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:27 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="e26408b893c6608746f532eb5d7e09c1a9d5c2afd3007d94c5abff89174198a5a36b279a291cb34ae5c4d743747a63c85aedb29253e544f3757e31aec5d40f18e5b14ccc059db5d9a66fa8efcb506daf036426b42da2346c95d36234e197773e560cc0731983dc09b9bf56a00810b7b84d9e6c7c14dd200b975999715a6ed82ec0e0c031d70cc70c6605f11ce892d1749ae5944c424e3febd3cc73292dc7045cd44208e9f108f517658bcb54a9be890d908e5842dc69d3ecef1ca8b865005cffc999d0e2428cd0f682a3cca3eb974f01867c7db1622d7b9a955b", 0xda, 0x40002180, 0x0, {0x0, r9}}, 0x100000) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2459.174260][ T5676] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2459.182653][ T5676] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2459.190658][ T5676] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2459.198620][ T5676] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.206597][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2459.214598][ T5676] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2459.222554][ T5685] CPU: 0 PID: 5685 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2459.232625][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.242703][ T5685] Call Trace: [ 2459.245979][ T5685] dump_stack_lvl+0xd6/0x122 [ 2459.250571][ T5685] dump_stack+0x11/0x1b [ 2459.254728][ T5685] should_fail+0x23c/0x250 [ 2459.259141][ T5685] should_fail_usercopy+0x16/0x20 [ 2459.264163][ T5685] _copy_from_user+0x1c/0xd0 [ 2459.268832][ T5685] __copy_msghdr_from_user+0x59/0x360 [ 2459.274213][ T5685] __sys_sendmsg+0x180/0x2c0 16:10:28 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:28 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2459.278807][ T5685] __x64_sys_sendmsg+0x42/0x50 [ 2459.283581][ T5685] do_syscall_64+0x44/0xa0 [ 2459.288064][ T5685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.293991][ T5685] RIP: 0033:0x7fec9c2c1709 [ 2459.298453][ T5685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.318118][ T5685] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 16:10:28 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:28 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2459.326537][ T5685] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2459.334593][ T5685] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2459.342569][ T5685] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.350545][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.358514][ T5685] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:28 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 55) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:28 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x3d47, &(0x7f0000000080)={0x0, 0x2000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:28 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 2) [ 2459.448839][ T5712] FAULT_INJECTION: forcing a failure. [ 2459.448839][ T5712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2459.462183][ T5712] CPU: 0 PID: 5712 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2459.472249][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.482308][ T5712] Call Trace: [ 2459.484847][ T5716] FAULT_INJECTION: forcing a failure. [ 2459.484847][ T5716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2459.485582][ T5712] dump_stack_lvl+0xd6/0x122 [ 2459.503247][ T5712] dump_stack+0x11/0x1b [ 2459.507400][ T5712] should_fail+0x23c/0x250 [ 2459.511815][ T5712] __alloc_pages+0x102/0x320 [ 2459.516435][ T5712] alloc_pages+0x382/0x3d0 [ 2459.520842][ T5712] __page_cache_alloc+0x4d/0xf0 [ 2459.526548][ T5712] page_cache_ra_unbounded+0x1be/0x430 [ 2459.532008][ T5712] ondemand_readahead+0x58c/0x7c0 [ 2459.537029][ T5712] page_cache_async_ra+0x17e/0x1a0 [ 2459.542134][ T5712] do_async_mmap_readahead+0x211/0x250 [ 2459.547585][ T5712] filemap_fault+0x106/0x9f0 [ 2459.552167][ T5712] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2459.558482][ T5712] ? cgroup_rstat_updated+0x34/0x100 [ 2459.563771][ T5712] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2459.569312][ T5712] handle_mm_fault+0xc81/0x1580 [ 2459.574151][ T5712] do_user_addr_fault+0x609/0xbe0 [ 2459.579162][ T5712] exc_page_fault+0x91/0x220 [ 2459.583738][ T5712] asm_exc_page_fault+0x1e/0x30 [ 2459.588688][ T5712] RIP: 0010:clear_user+0x60/0xa0 [ 2459.593610][ T5712] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2459.613208][ T5712] RSP: 0018:ffffc90004a27bb8 EFLAGS: 00010202 [ 2459.619344][ T5712] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2459.627308][ T5712] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2459.635267][ T5712] RBP: ffffc90004a27e58 R08: ffffffff819810e6 R09: 0001c90004a27e57 [ 2459.643223][ T5712] R10: 0000000000000004 R11: ffff88814d720080 R12: 0000000020020380 [ 2459.651181][ T5712] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2459.659223][ T5712] ? clear_user+0x36/0xa0 [ 2459.663541][ T5712] ? clear_user+0x48/0xa0 [ 2459.667853][ T5712] iov_iter_zero+0x11b/0xb20 [ 2459.672491][ T5712] ? should_fail+0xd6/0x250 [ 2459.676977][ T5712] read_iter_zero+0x63/0x180 [ 2459.681567][ T5712] do_iter_readv_writev+0x2fb/0x380 [ 2459.686759][ T5712] do_iter_read+0x192/0x5d0 [ 2459.691253][ T5712] ? import_iovec+0x69/0x80 [ 2459.695817][ T5712] do_readv+0x171/0x2c0 [ 2459.700003][ T5712] ? vfs_write+0x61a/0x900 [ 2459.704428][ T5712] __x64_sys_readv+0x41/0x50 [ 2459.709083][ T5712] do_syscall_64+0x44/0xa0 [ 2459.713487][ T5712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.719447][ T5712] RIP: 0033:0x7f4fc1ace709 [ 2459.723848][ T5712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.743439][ T5712] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2459.751833][ T5712] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2459.759792][ T5712] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2459.767758][ T5712] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.775804][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2459.783776][ T5712] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:28 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2459.792213][ T5716] CPU: 1 PID: 5716 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2459.802464][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.812512][ T5716] Call Trace: [ 2459.815782][ T5716] dump_stack_lvl+0xd6/0x122 [ 2459.820376][ T5716] dump_stack+0x11/0x1b [ 2459.824598][ T5716] should_fail+0x23c/0x250 [ 2459.829059][ T5716] should_fail_usercopy+0x16/0x20 [ 2459.834212][ T5716] _copy_from_user+0x1c/0xd0 [ 2459.838890][ T5716] iovec_from_user+0xc4/0x2e0 [ 2459.843561][ T5716] __import_iovec+0x57/0x2c0 [ 2459.848143][ T5716] ? _copy_from_user+0x94/0xd0 [ 2459.852911][ T5716] import_iovec+0x69/0x80 [ 2459.857320][ T5716] __sys_sendmsg+0x1fb/0x2c0 [ 2459.861910][ T5716] __x64_sys_sendmsg+0x42/0x50 [ 2459.866724][ T5716] do_syscall_64+0x44/0xa0 [ 2459.871137][ T5716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.877026][ T5716] RIP: 0033:0x7fec9c2c1709 [ 2459.881433][ T5716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:10:28 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x35000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:28 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:28 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:28 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x236}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x11, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r6, 0x4, 0x3, 0x7, 0xffffff80, 0x0, @private1, @loopback, 0xb86805ef2cc20c86, 0x7800, 0x5, 0x9}}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 3) [ 2459.901041][ T5716] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2459.909451][ T5716] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2459.917472][ T5716] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2459.925439][ T5716] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.933404][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.941354][ T5716] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:29 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2459.997905][ T5736] FAULT_INJECTION: forcing a failure. [ 2459.997905][ T5736] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.010605][ T5736] CPU: 1 PID: 5736 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2460.020668][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.030786][ T5736] Call Trace: [ 2460.034059][ T5736] dump_stack_lvl+0xd6/0x122 [ 2460.038651][ T5736] dump_stack+0x11/0x1b [ 2460.042849][ T5736] should_fail+0x23c/0x250 16:10:29 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2460.047263][ T5736] __should_failslab+0x81/0x90 [ 2460.052024][ T5736] should_failslab+0x5/0x20 [ 2460.056523][ T5736] kmem_cache_alloc_node+0x61/0x2c0 [ 2460.061764][ T5736] ? __alloc_skb+0xed/0x420 [ 2460.066271][ T5736] __alloc_skb+0xed/0x420 [ 2460.070596][ T5736] netlink_sendmsg+0x4d5/0x7d0 [ 2460.075369][ T5736] ? netlink_getsockopt+0x720/0x720 [ 2460.080560][ T5736] ____sys_sendmsg+0x39a/0x510 [ 2460.085404][ T5736] __sys_sendmsg+0x244/0x2c0 [ 2460.089993][ T5736] __x64_sys_sendmsg+0x42/0x50 [ 2460.094755][ T5736] do_syscall_64+0x44/0xa0 [ 2460.099200][ T5736] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.105153][ T5736] RIP: 0033:0x7fec9c2c1709 [ 2460.109563][ T5736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.129168][ T5736] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2460.137624][ T5736] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 16:10:29 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 56) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:29 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:29 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2460.145592][ T5736] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2460.153624][ T5736] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.161588][ T5736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.169649][ T5736] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:29 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x33cc, &(0x7f0000000380)={0x0, 0xb45d, 0x1, 0x1, 0x2c3, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_setup(0x7522, &(0x7f00000004c0)={0x0, 0x6391, 0x4, 0x1, 0x3c7, 0x0, r2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d9000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r6, r5, &(0x7f00000005c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x2, 0x10001, 0x0, 0x1, 0x6, 0x1}, 0xffffffc1) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x0, 0x8}, {0x2, 0x10000}]}, 0x14, 0x1) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2460.205425][ T5751] FAULT_INJECTION: forcing a failure. [ 2460.205425][ T5751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2460.218686][ T5751] CPU: 1 PID: 5751 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2460.228746][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.238795][ T5751] Call Trace: [ 2460.242069][ T5751] dump_stack_lvl+0xd6/0x122 [ 2460.246660][ T5751] dump_stack+0x11/0x1b [ 2460.250851][ T5751] should_fail+0x23c/0x250 16:10:29 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2460.255260][ T5751] __alloc_pages+0x102/0x320 [ 2460.259928][ T5751] alloc_pages+0x382/0x3d0 [ 2460.264344][ T5751] __page_cache_alloc+0x4d/0xf0 [ 2460.269261][ T5751] page_cache_ra_unbounded+0x1be/0x430 [ 2460.274744][ T5751] ondemand_readahead+0x58c/0x7c0 [ 2460.279768][ T5751] page_cache_async_ra+0x17e/0x1a0 [ 2460.284965][ T5751] do_async_mmap_readahead+0x211/0x250 [ 2460.290453][ T5751] filemap_fault+0x106/0x9f0 [ 2460.295086][ T5751] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2460.301409][ T5751] ? cgroup_rstat_updated+0x34/0x100 [ 2460.306689][ T5751] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2460.312279][ T5751] handle_mm_fault+0xc81/0x1580 [ 2460.317185][ T5751] do_user_addr_fault+0x609/0xbe0 [ 2460.322213][ T5751] exc_page_fault+0x91/0x220 [ 2460.326870][ T5751] asm_exc_page_fault+0x1e/0x30 [ 2460.331724][ T5751] RIP: 0010:clear_user+0x60/0xa0 [ 2460.336693][ T5751] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2460.356298][ T5751] RSP: 0018:ffffc90004c6bbb8 EFLAGS: 00010202 [ 2460.362384][ T5751] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2460.370338][ T5751] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2460.378294][ T5751] RBP: ffffc90004c6be58 R08: ffffffff819810e6 R09: 0001c90004c6be57 [ 2460.386248][ T5751] R10: 0000000000000004 R11: ffff888129d60040 R12: 0000000020020380 [ 2460.394223][ T5751] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2460.402189][ T5751] ? clear_user+0x36/0xa0 [ 2460.406521][ T5751] ? clear_user+0x48/0xa0 [ 2460.410853][ T5751] iov_iter_zero+0x11b/0xb20 [ 2460.415438][ T5751] ? should_fail+0xd6/0x250 [ 2460.419918][ T5751] read_iter_zero+0x63/0x180 [ 2460.424535][ T5751] do_iter_readv_writev+0x2fb/0x380 [ 2460.429730][ T5751] do_iter_read+0x192/0x5d0 [ 2460.434227][ T5751] ? import_iovec+0x69/0x80 [ 2460.438703][ T5751] do_readv+0x171/0x2c0 [ 2460.442840][ T5751] ? vfs_write+0x61a/0x900 [ 2460.447257][ T5751] __x64_sys_readv+0x41/0x50 [ 2460.451837][ T5751] do_syscall_64+0x44/0xa0 [ 2460.456233][ T5751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.462184][ T5751] RIP: 0033:0x7f4fc1ace709 [ 2460.466577][ T5751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.486345][ T5751] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2460.494747][ T5751] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 16:10:29 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x36000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:29 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r3, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x2) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000480)={0x0, 0x10, 0x1, [0x8, 0x0, 0xfffffffffffffffc, 0x1000, 0x7fffffff], [0x0, 0x7, 0x10000, 0x3, 0x8669, 0x5, 0x113, 0x2, 0xfff, 0xf0a, 0x18, 0x8b, 0x8, 0x1, 0x3, 0xbe75, 0xd800000000000000, 0x1, 0xaaf, 0x8, 0x6, 0x2, 0x7, 0xe8, 0x7, 0x5, 0x6, 0x63, 0x3, 0x7b55, 0x8, 0x4, 0xffffffffffffffff, 0x80, 0x5, 0x40, 0x3f, 0x7, 0x4, 0x800, 0x1, 0x1, 0x400, 0xf40000000000000, 0x1, 0xb0e, 0x81, 0x100000000, 0x0, 0xc00000000, 0x2, 0x7, 0x3, 0x64a, 0xffffffffffff0000, 0xc9ff, 0x4, 0xfffffffffffffe01, 0x2, 0x401, 0xe, 0xfffffffffffffffc, 0x80000000, 0x100000000, 0xfffffffffffffffd, 0x5, 0x1, 0x587, 0x1b, 0x8000, 0x230ccd4d, 0x20, 0x2, 0x9, 0xffffffff, 0xe, 0x7fff, 0x1, 0x40, 0xa7bb, 0x1, 0x8, 0x3, 0xfffffffffffffff8, 0x2, 0x0, 0x7f6, 0xb37d, 0x1, 0xee, 0x9, 0xffffffffffff0001, 0x2, 0x0, 0x52, 0x8, 0xfffffffffffffff8, 0x9, 0x3, 0x5, 0x5, 0x4, 0x8, 0x2, 0xffffffffffffffff, 0x7, 0x446, 0x3, 0xfffffffffffffffb, 0x9, 0x8, 0x3, 0x1, 0x7c3, 0x7, 0x7ff, 0x0, 0xffffffffffffff0b, 0x7, 0x5, 0xffffffff]}) 16:10:29 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:29 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 4) [ 2460.502753][ T5751] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2460.510718][ T5751] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.518690][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2460.526642][ T5751] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2460.604449][ T5773] FAULT_INJECTION: forcing a failure. [ 2460.604449][ T5773] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.617105][ T5773] CPU: 0 PID: 5773 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2460.627168][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.637253][ T5773] Call Trace: [ 2460.640529][ T5773] dump_stack_lvl+0xd6/0x122 [ 2460.645143][ T5773] dump_stack+0x11/0x1b [ 2460.649301][ T5773] should_fail+0x23c/0x250 [ 2460.653780][ T5773] __should_failslab+0x81/0x90 [ 2460.658545][ T5773] should_failslab+0x5/0x20 [ 2460.663044][ T5773] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2460.668821][ T5773] ? __kmalloc_node_track_caller+0x30/0x40 [ 2460.674624][ T5773] __kmalloc_node_track_caller+0x30/0x40 [ 2460.680258][ T5773] ? netlink_sendmsg+0x4d5/0x7d0 [ 2460.685196][ T5773] __alloc_skb+0x187/0x420 [ 2460.689638][ T5773] netlink_sendmsg+0x4d5/0x7d0 [ 2460.694456][ T5773] ? netlink_getsockopt+0x720/0x720 [ 2460.699653][ T5773] ____sys_sendmsg+0x39a/0x510 16:10:29 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:29 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x401) syz_io_uring_submit(r4, r6, &(0x7f0000000880)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5}, 0x0, {0x0, r7}}, 0x80000001) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x5511, &(0x7f0000000240)={0x0, 0xf0a7, 0xa, 0x3, 0x80, 0x0, r0}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000380)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r3, 0x69, &(0x7f00000007c0)=[{&(0x7f00000003c0)="6674ec469734923b8753478bc23f7b3f266a9dba6784ddfeb776276a0e75d843be4bf39e04a1ed342e2d173841e7043493b8493dcd58a9ef087a0d7ace7cfc5eb9c500d56e71e06211fad820", 0x4c}, {&(0x7f0000000480)="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", 0xfc}, {&(0x7f0000000580)="23a96d7c4f146dee1b81920077f538a7b15e19f785d7506b8ac224b5544da7a98e9bb8d87b7dbe361274517396419f1451bf8082f4e1249da1bc8f0dd26f17521ff8300e39ae573775ee01a60e4e7b18e9fbdfb1cf5013c59c0f0e6f55346b4ee22c7c9ce3ad5c0a3985a5a70d580d04ae0cbb17866f8ca9a098ae500b69244c4942c8c56057b755634c85d89b3ae770291cb881881d937fda629eeabedea7d378b436e19822bde971", 0xa9}, {&(0x7f0000000640)="e3a84b615229f427ea92f15900729922a7952a09071c9ec67cd5567e5ae32b9bf776c6d42b3770e34171ff95d8cea18e99138da8493a10b4f3476ebc966d37ad4dfb1295b1540af38fd38379c900901fc4ad7f5292ec38351ef91962cb5bc7f5689c442ef68a1e", 0x67}, {&(0x7f0000001500)="49002aa2d5d98c3a34b3e7d8c8b6b2ed5c2d6942394c2063c380ec4de6ab767f1fac6a40a268abd829a349e478c9c0c139ce8ca9379d87a0ec13b0d8bd30e4a720389a87e9d9c62b0d78186d9a253af099cfd30578c1210778ec05086827a6ab229b613a055cfe61c2b416b160792ca4704c2312f9eb2f93fd7fb71021724bc3f1b3c6a8b97c8396d53e525336557ad76dedef17165d57be5ca2d2ad3eee3f01beaf8c3bd95caf9a113632a0d19b8392e71459603fdff7343beb681d34a16ae712266181aa0b9e41bc35969577fb28e70bca6e2e5a2305e35f27b889f2a9fe855eb8b35f13336e13c4015c1465bd65f43912bcad1bfdd0d2b40511f08fd7fffb585d50bfb81348340554a8b179a6fe3fc4edc961fec5773816344d90a26c30b10f0883b38cd332c5316dffc035f41591b3cb75dc5a4aaf29e863068490a860e72dfad3372c0138e84a10bd1e550c4552963bb92c8860ceffd3bfd632641ffd8a5c2391f7bbcc0fc8b00787bde1e4a565e23510b2ad9c9e9d7613739633545a51411109b21fcc5b46e51c78e81e5a20a3fb67a1c74ec7cbffaebe3a310406a58e9c0afdfe876c92c20d3fce4f4a229c9b0cf73432e2e7b4bd9ebf42eeb7580b103c88ad08b14a481c81852e31e395f8213c7672e759454585b1e6514f16ff19bb67e62c0d191802acb6d8dcee6a8acbbc6ed019c4c6f6dbba74172b513c504f574d3a8455cfc392fadbbb22b0b60cad567ab2407c5aaf890f09308c1995bb17fdd59dbc6bf098d804e05f6f5e4596b49f6da675ba61d9cf455be2c20ab4c5c8990a7dcc06fb1ff82f7b7a4f3fbaaea27a49f9569b2c949d7d16409adc7818f38e52c1dd8e06149b03b3ba979ee9160c59b8c565ca43db2fd2489d546e695764c4114c76b21a5874c841bff8ec5ff416931fcebb404fa66d475a96f53519030240db95ef8aa115f3d877c72cd4573ef73e5d6f1075c0a8730bae13473777f1cdbf366d313a8ee0497671b470a367e4fd7b5d5f9aa7f3e0de459b399550a42e59ead4021e2c63dddb1bc4033988a491d787a857fe426b71d75f4e89861adda98b8a6bfa0bf3217690ecf0a7b8fdedbfe3376ba79ac434c7f8cee644d9565120f3c07cdb33eb87f9f046449fc50315bda223c843cc168ff57b382c99e96207431b1357210588edcfec9347b8f727c71aba01abc72ae803ccf1ac348c6ade17b9aafad89ab90eae74c9a3d2bff114827658b87c1c22dc547e4cb138004a390b19c81c613b79f29e76a16140485e8a637ee9178f8728d1fcca815d2b47438894c0db438ef305e842888eb75718b54a425f55987c95c277eb7014c6984dfa90f455c95362ee67cc41cf71241236d1281c1c57aff4461fdfd62c7dbf8ae44ba4f8c1353f8d6612b9744f27c4621421b4abc5d2545275ca6df42edc8adaff353e8f491f7492a65585aefd33e59e1dd8d03c7a459781a02ceddbd6332fab33957055f8d01fbf19af4b0f7de379531476bceb4a422f36efc28d30cd7fa22c96efdc032e780a0af451e62f91a23210088853ecd3ff89e371e6cc7ec88961aa730a33781771073b301cf9ab96c6cd68563c21eac41024ac191613be3883d2d35ed886cf9a742d55388713752c832d10a85f8fd0c0b835c2d6f5dacb6dbcfd44025312502b17f3955c8d24f0f5f9fdd87a86fe37363b253de48e317ce005a5f7f2f42d6335eda7595a23c98b8673c8812fece3a601ae8119c7b8aaa771a2b9c267a43a8080e169fc6af93a384bf4bf7e83d1ab980e55550d48a76260e196825b57493bb7ad06aeea41006c82e707535206d48d7d86887ce4a31b152d2208e2f8e6554fc20a397c04b3dabbce244da5e31cd6fc5453732d7f59c0a32cedc37fb2e9651beb45351731551b266b0ce943a6661e936ddab621610837bc5707f0f1bb962266fd775d6b84ef6507430eb47a086270f7f35b4fddafd5f451c0a364ad1242ad8e42dd858c00e0049e0dae7fc7729962ed4472be3c71224f1609f065afc7f90a66d3ebd31057c85fe3aab80003b53c2a1b2d0a2cc3babf4491f1e2a12e8943599eb7e23113bff6f33da64683d764e90677a4bbee6ac47c367747d837abc8cb69f7fd6f1d10bc93ba562149d3e30220f207b9699871f0253bf604baa81f06c20c656b7452e3481330e9ebef99ee9a10a28b9a0c468243adb8ecdc97ae9fa14c97c8e247daea6b4b6f5de59e461b18c90f716c19ba2dc22493b1e74ce4d7892fc0cebe8a920093921335f253b12593d49d10e0bd99878cfcc20f554796c343dca4addd8c4e48c7b68de5b98bec8f0f93675fe0420fde0bb1dc40dd763e60ae9ed2c6efc37b0ef65f2103cea41db7c289ff99d9850cbc7bc26e346b8c51ab5d6175651cbc7cc831c2087ea8ab2375b74f4df63ad375b7813d94ddab341aab76bf70a2339f1267f3d7b9ef27b7af0a85c6644362c806de2cd60ab176291957363c70d51218e843a24c90aba4ca064853285b39b8b5a4e0e7b26d85c4dd4617e556334232d15d2dcd7e4a2cebfeb7809a8dc0449ca69990c8d745adcaf09491e18f3e05c187b4a0dc677644724f5f2fcf8d2f3ec991c8f3b224f617cf87580982bd048ff14d82b798bc5ecbfcdc0b625b5bda59dd13df9f493bf4741689d50d7ddc0f55bde66c84c88d6845f75c9be8ca17692234650933ebe3ccba08c26ee47564e3296919be1492e56cab652a1c217c849a271963f0fa68b7024df19223d0a027a4eade0e9c3e1197e8d94054d0f7127cf5e240d2deddd0687e5f85999cde0cdab54b6e973ef9a6e745d7ec60af230ee7b763fe827cc13de7287a938b65c24c3354a721e85406be3074175ff5f18cf0992ab448d0555966f162999c097acd425e8f2f258bc6fca84695183ec4e0fc541072604d5e9418ec110f3b0e8d2d40c3f42b7826ceb95986bb15ebf34dc8f97ae707e2c0aff2791c13debe1caafb28fb38852cade7a185866c7b1760a36a5b2974c4bdf98abe73dcd4b26385a5fc122567c146cd2ff628b37925df63b077701d1f68aa620469af31807945dda6fc3c3561e04c690e4f747e5b41b1584fde86ae84d64f4324478138259654f74902a5513d5358b1ab63848c7cecf4a0a2b7b6a53e3785a87895293bd4a73d20d61813d3b629d26f8f1aa6945e4e38eb7128ac727339968e7d7649ab8327234e2ac15dc1e1aea627799173215eebf71eb143274b4bcc2d2c2ea4d0c92d64e0a4b0a14fed65fe4671c499861b6e700b44bf7f311c9054c9029a42473a3d24414c597057bbc4b2a5ff5fc687efa50137f3be97b30628378e402dace62f906c8c150da4ff36ebbd19faa9f394c5adbf838923f34f5057723de252c78938f4f23ff4a7ba50b15cb7f68e57b78cf127009e623d26979fe6ab5dec67bfbf00f827efd0f84158005b25293216a44516a8c5ec943dd6cbca64a0a9de3102029874721039b1586144b214c89dc5dbe03e97f0933002ac5e012b97306c914badc081f0037d76af3592b593f56b14fc5db6a41a9e9abcbfe32b3dd85d3879c2068a601956fa59569d11559ca2b04d92082f172e8c4e6a4c3ee15b08c70a1874f92a23abdc894181e44ef036ab3bc86cb668b206a43574a8b3cce3483e184fa16aef9acef5a4e19e8b0bd2dbc2604194e92e7f1410a2fb7c7e3f7228b1277c21036f181f95c35880e4e65bd0597695346b16a4a8cc8207999598609f05ea5002598628465c8d03f035ade08697c9a84e6fcfcd0d3103d4a30f6024bd0455236fa39d01630e2b907dea8bcb5fd22ca6c0467a16e41b3d99f2bc40083de5d8248fc159f567e2969065d20450914d9080b7886e138bd3b3a40c81d6086f0d525b39b8b4f0fb76392d14d1c5c271656062b9ff27e56054b3f5e7cd55fa5ff5f9d5c42ede30e9f74596f9f5450b8a416c87ee4162cb1271a5d9e00422e8a5e0c6f8cfca2ec66c25d650109d7b35b4ba736e9c017617184c7f40f726228675df23d1f1a88a0ff0277b4e887c6af5b5b8cd33f636c83dd2b967cc8e10fe44696940d78b406c56a2633b63593d5fed194f2ab8ef42615a0f3d460680cc30b289fc871b66fe987a844c7d245686fa97a610ca83d61ec7f6338b1c0c350dc502a989320cf089adf30f598a732c5fd313c9bd631bab5f499f3956cdc2438413c35aa000d88df0d7e6a2f928e29828a7fd21388fccb8556e1978f10589e0b629768d749f5809ef7d6053807a6ef5bdde8dfefe640ae72bdfb48e5db35fc4b4b871205ecc2021baf74ed5314df54ee8287a24910c9e1bdad6a31c7e341b62c359e5b568736e8986b5d4dc4c22fd3a24b636b042a5a2d80d621f5a9c2882ae11c91265204bbf1b5d83661b96c32e768adbb57ce1f3202fa84ca4ae8ae43b31b3b94353ee31903a8096e194cd12bd6a9f669be719b6d2dfba579ae3f1ce87a13a9967b523689fb21a650d36987fc7eacebd665dc4c5f4d1ceb09f1fbac025d8226a43d5bf606cedc5b996ecd86dba9740e0a0c40acac7f51f08c104b15506f26bd2fbc4f13a851e1a776834fcaf4ea729e0e31cd1353543a3957fb22500c177318946030c8892263f7db57505f4f5bf8d96b00e571deec8d8bd8a9156541e7d56e19c915421d4ae852c42c3baee314a4f8017444c058d669cd0db6a12ca3fb18ef06660fdb59c5f74d03e85b30e9aed6613eb3345e82bf7f89a41a890f12f7f102c2644039edf5a8cfe5d9593c93d5474d33b77c58305be4242e3bbcf8baafccb853aab76b6b84e0ed8359cf321dd3077be4385c0751fd19c4ba95339a6f2c18c870b7bae11859d0e81c4c0b942df251c6f4e22289205a128317e59b6d976ee0d5532458196b69c5bdda0c79b0849a1421820fca3f356a2b5038b4f53a5fbca9685490a05e156076175ab253f14ae435159eb4befa929c7807586a67a022f1ad7dc69dfa3ec9c33dc1e19cb2f49574872c83057cd8f5fb0ee36b04091122a038490403a40630d7775cccce41bca817d5169ab5af56fcc33f7256599907c31b65d12dab74424927e3d8273d592f56368588c129fefc96ef1ce8e482f8b3dee5117dca160d29ef21a7459edc123ffe7ec5e9d2b24a90e860a39418dbb49f38ef20ce6f39944e5a5bfb691171508c4da932546a9cbb714d19325b2f5b3d00e83a08a5d73acf82effa6877128f67637e01778c3384d2150e992002ddb60e93bf1f0ef2fd56e6de8ad62248f4d141ce54f00c9c3d11339a1c55ee8008c2babd73afc5b856c0e2e332dd63997975962100f9a31316c63c1d8c1105ffc599cf3c7b6e9ddb90e0fb38f5c432d8dac1e2542edfed73e3a2ea498bd6ae47c3dd48c55217ab2b59eefb73a7c256a842289ad4ca96ae325544a0508582c8037d07e3922bdec4f4c2e9c947a8ee7ab60596148de235b96402eabed79683613bc3598d6546c94f19e901e2881efad6e83034e2480fc7ce8c8eaf87dc166cbd8ffea4416417d3dcefa2f7f467dbc0b377c0547aa7a3ddd72232a3f9fd24c428f92fb2adf487568838ba6a681547446636338a8c16afce9b47690b9952325f841c819b8e7a5b7f1439e073cec00aa76915ec26e2a278f65c42aa79af272a6efa4084b1ca0c7e11b85046e47caf2efd4371d9c7f4d8807b1bb9f0a2c844d05c922e3ead10055d29b223cad1b744675cf9123bd12dfd3edd3592bdb37a1b8308575abe762f89c30fa530a83bbc45b3419488543d9dcd5f76493d2b241e20edc3228f6d3762ea91640f02d305a2c5b0fbaa22c5c1093e7660e453b981e46bd420e5c", 0x1000}, {&(0x7f00000006c0)="6478f9fb37ff1fd29789ac45542d8865e12e9cdf5c21f55ead8732dde41fc495604e84810c28022b5c8a38db97a5e3060f97becea67a5425ef13b1b3309d1595c3db309aef4ddb6e64315089c502678d1f42b1cdf5962b9670ef4543d4ac93c3e6b0bc14c655d66357873e9a512f8a3db7cf92158e6fc3b04a720ae4b81e1a0c61b8199c4bb8c3ec8098315c80bc1d54e07a5a06612fd0265c9b8515862cd16d8ed029920e2e4c035b83f48c3b4ad96108e16c4a5e5a8ace6b5ed975fc6d84a74ed0c3dc022e9a491f4f1a5414c2bf0347479d", 0xd3}], 0x6, 0x11, 0x0, {0x1, r10}}, 0x200) syz_io_uring_submit(r1, r8, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2460.704439][ T5773] __sys_sendmsg+0x244/0x2c0 [ 2460.709035][ T5773] __x64_sys_sendmsg+0x42/0x50 [ 2460.713805][ T5773] do_syscall_64+0x44/0xa0 [ 2460.718237][ T5773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.724140][ T5773] RIP: 0033:0x7fec9c2c1709 [ 2460.728548][ T5773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:10:29 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 57) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:29 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:29 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2460.748153][ T5773] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2460.756570][ T5773] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2460.764543][ T5773] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2460.772563][ T5773] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.780539][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.788502][ T5773] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:29 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000400), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d7000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x7, 0x3, &(0x7f0000000180)="e090c8aa0dfb980b77", 0x9, 0x8, 0x0, {0x0, r7}}, 0x400) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd, 0x0, 0x1000, 0x7ff, 0x4, 0x1, {0x3, r7}}, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000014c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r9, &(0x7f0000000280)={0x38b180, 0x8, 0xc}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 5) [ 2460.863298][ T5795] FAULT_INJECTION: forcing a failure. [ 2460.863298][ T5795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2460.876557][ T5795] CPU: 0 PID: 5795 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2460.886625][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.895126][ T5801] FAULT_INJECTION: forcing a failure. [ 2460.895126][ T5801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2460.896674][ T5795] Call Trace: [ 2460.896683][ T5795] dump_stack_lvl+0xd6/0x122 [ 2460.917814][ T5795] dump_stack+0x11/0x1b [ 2460.922156][ T5795] should_fail+0x23c/0x250 [ 2460.926564][ T5795] __alloc_pages+0x102/0x320 [ 2460.931145][ T5795] alloc_pages+0x382/0x3d0 [ 2460.935657][ T5795] __page_cache_alloc+0x4d/0xf0 [ 2460.940535][ T5795] page_cache_ra_unbounded+0x1be/0x430 [ 2460.945987][ T5795] ondemand_readahead+0x58c/0x7c0 [ 2460.950998][ T5795] page_cache_async_ra+0x17e/0x1a0 [ 2460.956116][ T5795] do_async_mmap_readahead+0x211/0x250 [ 2460.961606][ T5795] filemap_fault+0x106/0x9f0 [ 2460.966184][ T5795] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2460.972500][ T5795] ? cgroup_rstat_updated+0x34/0x100 [ 2460.977795][ T5795] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2460.983409][ T5795] handle_mm_fault+0xc81/0x1580 [ 2460.988282][ T5795] do_user_addr_fault+0x609/0xbe0 [ 2460.993294][ T5795] exc_page_fault+0x91/0x220 [ 2460.997867][ T5795] asm_exc_page_fault+0x1e/0x30 [ 2461.002708][ T5795] RIP: 0010:clear_user+0x60/0xa0 [ 2461.007670][ T5795] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2461.027263][ T5795] RSP: 0018:ffffc90004d43bb8 EFLAGS: 00010202 [ 2461.033417][ T5795] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2461.041369][ T5795] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2461.049342][ T5795] RBP: ffffc90004d43e58 R08: ffffffff819810e6 R09: 0001c90004d43e57 [ 2461.057298][ T5795] R10: 0000000000000004 R11: ffff88814b66b080 R12: 0000000020020380 [ 2461.065342][ T5795] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2461.073378][ T5795] ? clear_user+0x36/0xa0 [ 2461.077701][ T5795] ? clear_user+0x48/0xa0 [ 2461.082049][ T5795] iov_iter_zero+0x11b/0xb20 [ 2461.086628][ T5795] ? should_fail+0xd6/0x250 [ 2461.091117][ T5795] read_iter_zero+0x63/0x180 [ 2461.095696][ T5795] do_iter_readv_writev+0x2fb/0x380 [ 2461.100888][ T5795] do_iter_read+0x192/0x5d0 [ 2461.105388][ T5795] ? import_iovec+0x69/0x80 [ 2461.109876][ T5795] do_readv+0x171/0x2c0 [ 2461.114018][ T5795] ? vfs_write+0x61a/0x900 [ 2461.118483][ T5795] __x64_sys_readv+0x41/0x50 [ 2461.123060][ T5795] do_syscall_64+0x44/0xa0 [ 2461.127532][ T5795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.133494][ T5795] RIP: 0033:0x7f4fc1ace709 [ 2461.137915][ T5795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.157518][ T5795] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2461.165915][ T5795] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2461.173870][ T5795] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2461.181825][ T5795] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.189830][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2461.197841][ T5795] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2461.205802][ T5801] CPU: 1 PID: 5801 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2461.215872][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.225920][ T5801] Call Trace: [ 2461.229195][ T5801] dump_stack_lvl+0xd6/0x122 [ 2461.233782][ T5801] dump_stack+0x11/0x1b [ 2461.237974][ T5801] should_fail+0x23c/0x250 [ 2461.242391][ T5801] should_fail_usercopy+0x16/0x20 [ 2461.247411][ T5801] _copy_from_iter+0x131/0x980 [ 2461.252172][ T5801] ? check_stack_object+0x61/0x70 [ 2461.257219][ T5801] ? __virt_addr_valid+0x15a/0x1a0 16:10:30 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x37000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:30 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:30 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r1 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:30 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2461.262333][ T5801] ? __check_object_size+0x253/0x310 [ 2461.267618][ T5801] netlink_sendmsg+0x58d/0x7d0 [ 2461.272448][ T5801] ? netlink_getsockopt+0x720/0x720 [ 2461.277642][ T5801] ____sys_sendmsg+0x39a/0x510 [ 2461.282406][ T5801] __sys_sendmsg+0x244/0x2c0 [ 2461.286997][ T5801] __x64_sys_sendmsg+0x42/0x50 [ 2461.291768][ T5801] do_syscall_64+0x44/0xa0 [ 2461.296269][ T5801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.302164][ T5801] RIP: 0033:0x7fec9c2c1709 16:10:30 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2461.306575][ T5801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.326178][ T5801] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2461.334589][ T5801] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2461.342552][ T5801] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2461.350521][ T5801] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 16:10:30 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r1 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:30 executing program 1: setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2461.358487][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.366451][ T5801] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:30 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 58) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:30 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r1 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:30 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x78, 0x0) r1 = syz_io_uring_setup(0x46a0, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x2, 0x11a, 0x0, r0}, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="55870d79e5788260841ad69a60839ebe4ebc1d863778abf85b48b7eb4eeac55a70cda321c1ac26a6e708f610d3e58b9c304d1b0fb08834ca0b8575e0729d07e5b36d859832b5200ed03978da103df783a84bd9f44d6db19d29079e4f8d946ffa8e30e1f3dcad1777ef995d2348d9faf4853b40f854bb44aac0b81331da7513ba7a7c09c65fb780e5e8c1624d4ab1ee7d46be0f92ca2bbb274017f2ec73d10f811ee0d6d696f48fec6e8f87b9128910b20da17835e9f1a81035fdfcd561105b22d98ebfbe9159655d", 0xc8, 0x24004000, &(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r2, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r1, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 6) [ 2461.484816][ T5838] FAULT_INJECTION: forcing a failure. [ 2461.484816][ T5838] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.492441][ T5840] FAULT_INJECTION: forcing a failure. [ 2461.492441][ T5840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2461.497454][ T5838] CPU: 0 PID: 5838 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2461.521110][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.531169][ T5838] Call Trace: [ 2461.534432][ T5838] dump_stack_lvl+0xd6/0x122 [ 2461.539009][ T5838] dump_stack+0x11/0x1b [ 2461.543148][ T5838] should_fail+0x23c/0x250 [ 2461.547554][ T5838] ? xfrm_state_alloc+0x28/0x170 [ 2461.552530][ T5838] __should_failslab+0x81/0x90 [ 2461.557278][ T5838] should_failslab+0x5/0x20 [ 2461.561829][ T5838] kmem_cache_alloc+0x4f/0x300 [ 2461.566612][ T5838] xfrm_state_alloc+0x28/0x170 [ 2461.571360][ T5838] xfrm_add_sa+0xb1a/0x1bd0 [ 2461.575928][ T5838] xfrm_user_rcv_msg+0x31c/0x440 [ 2461.580854][ T5838] ? __d_rehash+0x125/0x180 [ 2461.585347][ T5838] netlink_rcv_skb+0x14e/0x250 [ 2461.590330][ T5838] ? xfrm_netlink_rcv+0x60/0x60 [ 2461.595166][ T5838] xfrm_netlink_rcv+0x43/0x60 [ 2461.599843][ T5838] netlink_unicast+0x5ec/0x6b0 [ 2461.604598][ T5838] netlink_sendmsg+0x6ea/0x7d0 [ 2461.609498][ T5838] ? netlink_getsockopt+0x720/0x720 [ 2461.614795][ T5838] ____sys_sendmsg+0x39a/0x510 [ 2461.619555][ T5838] __sys_sendmsg+0x244/0x2c0 [ 2461.624185][ T5838] __x64_sys_sendmsg+0x42/0x50 [ 2461.629013][ T5838] do_syscall_64+0x44/0xa0 [ 2461.633439][ T5838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.639322][ T5838] RIP: 0033:0x7fec9c2c1709 [ 2461.643878][ T5838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.663472][ T5838] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2461.671867][ T5838] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2461.679837][ T5838] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2461.687791][ T5838] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.695747][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.703719][ T5838] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2461.711721][ T5840] CPU: 1 PID: 5840 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2461.721783][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.731835][ T5840] Call Trace: [ 2461.735121][ T5840] dump_stack_lvl+0xd6/0x122 [ 2461.739708][ T5840] dump_stack+0x11/0x1b [ 2461.743919][ T5840] should_fail+0x23c/0x250 [ 2461.748333][ T5840] __alloc_pages+0x102/0x320 [ 2461.752973][ T5840] alloc_pages+0x382/0x3d0 [ 2461.757441][ T5840] __page_cache_alloc+0x4d/0xf0 [ 2461.762292][ T5840] page_cache_ra_unbounded+0x1be/0x430 [ 2461.767749][ T5840] ondemand_readahead+0x58c/0x7c0 [ 2461.772848][ T5840] page_cache_async_ra+0x17e/0x1a0 [ 2461.777962][ T5840] do_async_mmap_readahead+0x211/0x250 [ 2461.783416][ T5840] filemap_fault+0x106/0x9f0 [ 2461.788013][ T5840] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2461.794404][ T5840] ? cgroup_rstat_updated+0x34/0x100 [ 2461.799674][ T5840] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2461.805241][ T5840] handle_mm_fault+0xc81/0x1580 [ 2461.810100][ T5840] do_user_addr_fault+0x609/0xbe0 [ 2461.815135][ T5840] exc_page_fault+0x91/0x220 [ 2461.819762][ T5840] asm_exc_page_fault+0x1e/0x30 [ 2461.824690][ T5840] RIP: 0010:clear_user+0x60/0xa0 [ 2461.829617][ T5840] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2461.849331][ T5840] RSP: 0018:ffffc90004e53bb8 EFLAGS: 00010202 [ 2461.855374][ T5840] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2461.863327][ T5840] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2461.871289][ T5840] RBP: ffffc90004e53e58 R08: ffffffff819810e6 R09: 0001c90004e53e57 [ 2461.879292][ T5840] R10: 0000000000000004 R11: ffff88812e15c000 R12: 0000000020020380 [ 2461.887303][ T5840] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2461.895279][ T5840] ? clear_user+0x36/0xa0 [ 2461.899588][ T5840] ? clear_user+0x48/0xa0 [ 2461.903897][ T5840] iov_iter_zero+0x11b/0xb20 [ 2461.908464][ T5840] ? __schedule+0x435/0x680 [ 2461.912946][ T5840] ? should_fail+0xd6/0x250 [ 2461.917424][ T5840] read_iter_zero+0x63/0x180 [ 2461.921995][ T5840] do_iter_readv_writev+0x2fb/0x380 [ 2461.927173][ T5840] do_iter_read+0x192/0x5d0 [ 2461.931660][ T5840] ? import_iovec+0x69/0x80 [ 2461.936152][ T5840] do_readv+0x171/0x2c0 [ 2461.940351][ T5840] ? vfs_write+0x61a/0x900 [ 2461.944743][ T5840] __x64_sys_readv+0x41/0x50 [ 2461.949323][ T5840] do_syscall_64+0x44/0xa0 [ 2461.953722][ T5840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.959634][ T5840] RIP: 0033:0x7f4fc1ace709 [ 2461.964027][ T5840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.983615][ T5840] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2461.992023][ T5840] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2462.000058][ T5840] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2462.008007][ T5840] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.015957][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.023905][ T5840] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:31 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x38000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:31 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 7) 16:10:31 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:31 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r1, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x401, 0x0, 0x8000, 0x0, 0x1}, 0x81) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:31 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 59) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:31 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2462.110366][ T5857] FAULT_INJECTION: forcing a failure. [ 2462.110366][ T5857] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.123038][ T5857] CPU: 0 PID: 5857 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2462.133106][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.143162][ T5857] Call Trace: [ 2462.146440][ T5857] dump_stack_lvl+0xd6/0x122 [ 2462.151053][ T5857] dump_stack+0x11/0x1b [ 2462.155214][ T5857] should_fail+0x23c/0x250 [ 2462.159632][ T5857] ? xfrm_add_sa+0xe97/0x1bd0 [ 2462.164317][ T5857] __should_failslab+0x81/0x90 [ 2462.169102][ T5857] should_failslab+0x5/0x20 [ 2462.173602][ T5857] __kmalloc_track_caller+0x6d/0x350 [ 2462.178886][ T5857] ? kmem_cache_alloc+0x2e8/0x300 [ 2462.183904][ T5857] kmemdup+0x21/0x50 [ 2462.187852][ T5857] xfrm_add_sa+0xe97/0x1bd0 [ 2462.192452][ T5857] xfrm_user_rcv_msg+0x31c/0x440 [ 2462.197394][ T5857] ? __d_rehash+0x125/0x180 [ 2462.201908][ T5857] netlink_rcv_skb+0x14e/0x250 16:10:31 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:31 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2462.206673][ T5857] ? xfrm_netlink_rcv+0x60/0x60 [ 2462.211582][ T5857] xfrm_netlink_rcv+0x43/0x60 [ 2462.216344][ T5857] netlink_unicast+0x5ec/0x6b0 [ 2462.221269][ T5857] netlink_sendmsg+0x6ea/0x7d0 [ 2462.226029][ T5857] ? netlink_getsockopt+0x720/0x720 [ 2462.231233][ T5857] ____sys_sendmsg+0x39a/0x510 [ 2462.236013][ T5857] __sys_sendmsg+0x244/0x2c0 [ 2462.240652][ T5857] __x64_sys_sendmsg+0x42/0x50 [ 2462.245429][ T5857] do_syscall_64+0x44/0xa0 [ 2462.249853][ T5857] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2462.255800][ T5857] RIP: 0033:0x7fec9c2c1709 16:10:31 executing program 5: r0 = syz_io_uring_setup(0xf5c, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:31 executing program 5: r0 = syz_io_uring_setup(0xf5c, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2462.260283][ T5857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.279894][ T5857] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2462.288338][ T5857] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2462.296304][ T5857] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2462.304268][ T5857] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.312242][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.320280][ T5857] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2462.325299][ T5873] FAULT_INJECTION: forcing a failure. [ 2462.325299][ T5873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2462.341463][ T5873] CPU: 1 PID: 5873 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2462.351518][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.361566][ T5873] Call Trace: [ 2462.364886][ T5873] dump_stack_lvl+0xd6/0x122 [ 2462.369480][ T5873] dump_stack+0x11/0x1b [ 2462.373632][ T5873] should_fail+0x23c/0x250 [ 2462.378046][ T5873] __alloc_pages+0x102/0x320 [ 2462.382633][ T5873] alloc_pages+0x382/0x3d0 [ 2462.387056][ T5873] __page_cache_alloc+0x4d/0xf0 [ 2462.391961][ T5873] page_cache_ra_unbounded+0x1be/0x430 [ 2462.397415][ T5873] ondemand_readahead+0x58c/0x7c0 [ 2462.402452][ T5873] page_cache_async_ra+0x17e/0x1a0 16:10:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 8) [ 2462.407568][ T5873] do_async_mmap_readahead+0x211/0x250 [ 2462.413087][ T5873] filemap_fault+0x106/0x9f0 [ 2462.417735][ T5873] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2462.424187][ T5873] ? cgroup_rstat_updated+0x34/0x100 [ 2462.428502][ T5879] FAULT_INJECTION: forcing a failure. [ 2462.428502][ T5879] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.429474][ T5873] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2462.447576][ T5873] handle_mm_fault+0xc81/0x1580 [ 2462.452420][ T5873] do_user_addr_fault+0x609/0xbe0 [ 2462.457432][ T5873] exc_page_fault+0x91/0x220 [ 2462.462007][ T5873] asm_exc_page_fault+0x1e/0x30 [ 2462.466849][ T5873] RIP: 0010:clear_user+0x60/0xa0 [ 2462.471776][ T5873] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2462.491399][ T5873] RSP: 0018:ffffc90004eb3bb8 EFLAGS: 00010202 [ 2462.497463][ T5873] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2462.505418][ T5873] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2462.513370][ T5873] RBP: ffffc90004eb3e58 R08: ffffffff819810e6 R09: 0001c90004eb3e57 [ 2462.521322][ T5873] R10: 0000000000000004 R11: ffff88815075c080 R12: 0000000020020380 [ 2462.529286][ T5873] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2462.537239][ T5873] ? clear_user+0x36/0xa0 [ 2462.541553][ T5873] ? clear_user+0x48/0xa0 [ 2462.545866][ T5873] iov_iter_zero+0x11b/0xb20 [ 2462.550438][ T5873] ? should_fail+0xd6/0x250 [ 2462.554923][ T5873] read_iter_zero+0x63/0x180 [ 2462.559579][ T5873] do_iter_readv_writev+0x2fb/0x380 [ 2462.564775][ T5873] do_iter_read+0x192/0x5d0 [ 2462.569313][ T5873] ? import_iovec+0x69/0x80 [ 2462.573799][ T5873] do_readv+0x171/0x2c0 [ 2462.578016][ T5873] ? vfs_write+0x61a/0x900 [ 2462.582430][ T5873] __x64_sys_readv+0x41/0x50 [ 2462.587008][ T5873] do_syscall_64+0x44/0xa0 [ 2462.591422][ T5873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2462.597308][ T5873] RIP: 0033:0x7f4fc1ace709 [ 2462.601714][ T5873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.621306][ T5873] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2462.629796][ T5873] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2462.637794][ T5873] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2462.645750][ T5873] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.653814][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.661767][ T5873] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2462.669748][ T5879] CPU: 0 PID: 5879 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2462.679874][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.689969][ T5879] Call Trace: [ 2462.693243][ T5879] dump_stack_lvl+0xd6/0x122 [ 2462.697844][ T5879] dump_stack+0x11/0x1b [ 2462.701983][ T5879] should_fail+0x23c/0x250 [ 2462.706423][ T5879] __should_failslab+0x81/0x90 [ 2462.711218][ T5879] should_failslab+0x5/0x20 [ 2462.715773][ T5879] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2462.721577][ T5879] ? __crypto_alg_lookup+0x36d/0x3a0 [ 2462.726935][ T5879] ? __kmalloc_node+0x30/0x40 [ 2462.731591][ T5879] __kmalloc_node+0x30/0x40 [ 2462.736076][ T5879] crypto_create_tfm_node+0x4a/0x1f0 [ 2462.741341][ T5879] ? crypto_alg_mod_lookup+0x397/0x4e0 [ 2462.746846][ T5879] crypto_alloc_tfm_node+0x100/0x290 [ 2462.752149][ T5879] crypto_alloc_aead+0x2b/0x30 [ 2462.756962][ T5879] esp6_init_state+0x1d2/0x770 [ 2462.761709][ T5879] __xfrm_init_state+0x523/0x810 [ 2462.766699][ T5879] xfrm_add_sa+0x15cf/0x1bd0 [ 2462.771271][ T5879] xfrm_user_rcv_msg+0x31c/0x440 [ 2462.776261][ T5879] ? __d_rehash+0x125/0x180 [ 2462.780748][ T5879] netlink_rcv_skb+0x14e/0x250 [ 2462.785496][ T5879] ? xfrm_netlink_rcv+0x60/0x60 [ 2462.790388][ T5879] xfrm_netlink_rcv+0x43/0x60 [ 2462.795242][ T5879] netlink_unicast+0x5ec/0x6b0 [ 2462.800380][ T5879] netlink_sendmsg+0x6ea/0x7d0 [ 2462.805135][ T5879] ? netlink_getsockopt+0x720/0x720 [ 2462.810433][ T5879] ____sys_sendmsg+0x39a/0x510 [ 2462.815244][ T5879] __sys_sendmsg+0x244/0x2c0 [ 2462.819819][ T5879] __x64_sys_sendmsg+0x42/0x50 [ 2462.824566][ T5879] do_syscall_64+0x44/0xa0 [ 2462.829401][ T5879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2462.835285][ T5879] RIP: 0033:0x7fec9c2c1709 [ 2462.839888][ T5879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.859512][ T5879] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2462.867908][ T5879] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2462.875861][ T5879] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2462.883847][ T5879] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.891807][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.899769][ T5879] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:31 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x39000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:31 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x2d, &(0x7f0000000240)={0x0, 0x756d, 0x4, 0x0, 0x2e1}, &(0x7f00000da000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000380)) r5 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(r4, r3, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2007, @fd_index=0x4, 0x101, &(0x7f00000003c0)=""/106, 0x6a, 0x8, 0x0, {0x0, r8}}, 0x1) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3ff0) syz_io_uring_submit(r1, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r10, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:31 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:31 executing program 5: r0 = syz_io_uring_setup(0xf5c, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 9) 16:10:31 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 60) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2462.976817][ T5888] FAULT_INJECTION: forcing a failure. [ 2462.976817][ T5888] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.989508][ T5888] CPU: 1 PID: 5888 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2462.999572][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.009632][ T5888] Call Trace: [ 2463.012996][ T5888] dump_stack_lvl+0xd6/0x122 [ 2463.015412][ T5895] FAULT_INJECTION: forcing a failure. [ 2463.015412][ T5895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2463.017588][ T5888] dump_stack+0x11/0x1b [ 2463.017612][ T5888] should_fail+0x23c/0x250 [ 2463.039306][ T5888] __should_failslab+0x81/0x90 [ 2463.044064][ T5888] should_failslab+0x5/0x20 [ 2463.048613][ T5888] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2463.054412][ T5888] ? __crypto_alg_lookup+0x36d/0x3a0 [ 2463.059690][ T5888] ? __kmalloc_node+0x30/0x40 [ 2463.064354][ T5888] __kmalloc_node+0x30/0x40 [ 2463.068849][ T5888] crypto_create_tfm_node+0x4a/0x1f0 [ 2463.074128][ T5888] ? crypto_alg_mod_lookup+0x397/0x4e0 [ 2463.079572][ T5888] crypto_alloc_tfm_node+0x100/0x290 [ 2463.084846][ T5888] crypto_alloc_aead+0x2b/0x30 [ 2463.089649][ T5888] esp6_init_state+0x1d2/0x770 [ 2463.094475][ T5888] ? mod_node_page_state+0x18/0xa0 [ 2463.099575][ T5888] ? __list_del_entry_valid+0x54/0xc0 [ 2463.104944][ T5888] ? __list_add_valid+0x28/0x90 [ 2463.109836][ T5888] __xfrm_init_state+0x523/0x810 [ 2463.114757][ T5888] xfrm_add_sa+0x15cf/0x1bd0 [ 2463.119333][ T5888] xfrm_user_rcv_msg+0x31c/0x440 [ 2463.124269][ T5888] ? __d_rehash+0x125/0x180 [ 2463.128782][ T5888] netlink_rcv_skb+0x14e/0x250 [ 2463.133532][ T5888] ? xfrm_netlink_rcv+0x60/0x60 [ 2463.138366][ T5888] xfrm_netlink_rcv+0x43/0x60 [ 2463.143105][ T5888] netlink_unicast+0x5ec/0x6b0 [ 2463.147851][ T5888] netlink_sendmsg+0x6ea/0x7d0 [ 2463.152668][ T5888] ? netlink_getsockopt+0x720/0x720 [ 2463.157895][ T5888] ____sys_sendmsg+0x39a/0x510 [ 2463.162715][ T5888] __sys_sendmsg+0x244/0x2c0 [ 2463.167291][ T5888] __x64_sys_sendmsg+0x42/0x50 [ 2463.172052][ T5888] do_syscall_64+0x44/0xa0 [ 2463.176467][ T5888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2463.182348][ T5888] RIP: 0033:0x7fec9c2c1709 [ 2463.186743][ T5888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.206375][ T5888] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2463.214780][ T5888] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2463.222738][ T5888] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2463.230782][ T5888] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2463.238735][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2463.246690][ T5888] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2463.254694][ T5895] CPU: 0 PID: 5895 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2463.264758][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.274881][ T5895] Call Trace: [ 2463.278181][ T5895] dump_stack_lvl+0xd6/0x122 [ 2463.282977][ T5895] dump_stack+0x11/0x1b [ 2463.287134][ T5895] should_fail+0x23c/0x250 [ 2463.291606][ T5895] __alloc_pages+0x102/0x320 [ 2463.296197][ T5895] alloc_pages+0x382/0x3d0 [ 2463.300642][ T5895] __page_cache_alloc+0x4d/0xf0 [ 2463.305491][ T5895] page_cache_ra_unbounded+0x1be/0x430 [ 2463.310949][ T5895] ondemand_readahead+0x58c/0x7c0 [ 2463.316045][ T5895] page_cache_async_ra+0x17e/0x1a0 [ 2463.321160][ T5895] do_async_mmap_readahead+0x211/0x250 16:10:32 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 10) [ 2463.326636][ T5895] filemap_fault+0x106/0x9f0 [ 2463.331299][ T5895] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2463.337625][ T5895] ? cgroup_rstat_updated+0x34/0x100 [ 2463.342931][ T5895] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2463.348478][ T5895] handle_mm_fault+0xc81/0x1580 [ 2463.353328][ T5895] do_user_addr_fault+0x609/0xbe0 [ 2463.358355][ T5895] exc_page_fault+0x91/0x220 [ 2463.362989][ T5895] asm_exc_page_fault+0x1e/0x30 [ 2463.366023][ T5906] FAULT_INJECTION: forcing a failure. [ 2463.366023][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.367904][ T5895] RIP: 0010:clear_user+0x60/0xa0 [ 2463.367926][ T5895] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2463.405253][ T5895] RSP: 0018:ffffc90004fabbb8 EFLAGS: 00010202 [ 2463.411307][ T5895] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2463.419270][ T5895] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2463.427226][ T5895] RBP: ffffc90004fabe58 R08: ffffffff819810e6 R09: 0001c90004fabe57 [ 2463.435183][ T5895] R10: 0000000000000004 R11: ffff888150a58000 R12: 0000000020020380 [ 2463.443152][ T5895] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2463.451122][ T5895] ? clear_user+0x36/0xa0 [ 2463.455452][ T5895] ? clear_user+0x48/0xa0 [ 2463.459764][ T5895] iov_iter_zero+0x11b/0xb20 [ 2463.464404][ T5895] ? should_fail+0xd6/0x250 [ 2463.468935][ T5895] read_iter_zero+0x63/0x180 [ 2463.473512][ T5895] do_iter_readv_writev+0x2fb/0x380 [ 2463.478706][ T5895] do_iter_read+0x192/0x5d0 [ 2463.483264][ T5895] ? import_iovec+0x69/0x80 [ 2463.487765][ T5895] do_readv+0x171/0x2c0 [ 2463.491909][ T5895] ? vfs_write+0x61a/0x900 [ 2463.496339][ T5895] __x64_sys_readv+0x41/0x50 [ 2463.500957][ T5895] do_syscall_64+0x44/0xa0 [ 2463.505364][ T5895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2463.511297][ T5895] RIP: 0033:0x7f4fc1ace709 [ 2463.515698][ T5895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.535288][ T5895] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2463.543739][ T5895] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2463.551707][ T5895] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2463.559763][ T5895] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2463.567720][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2463.575788][ T5895] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2463.583755][ T5906] CPU: 1 PID: 5906 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2463.593818][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.604087][ T5906] Call Trace: [ 2463.607365][ T5906] dump_stack_lvl+0xd6/0x122 [ 2463.611960][ T5906] dump_stack+0x11/0x1b [ 2463.616185][ T5906] should_fail+0x23c/0x250 [ 2463.620725][ T5906] __should_failslab+0x81/0x90 [ 2463.625485][ T5906] should_failslab+0x5/0x20 [ 2463.629988][ T5906] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2463.635720][ T5906] ? __down_read_common+0x17e/0x540 [ 2463.640918][ T5906] ? __kmalloc_node+0x30/0x40 [ 2463.645656][ T5906] ? drbg_hmac_generate+0x3f0/0x420 [ 2463.650880][ T5906] __kmalloc_node+0x30/0x40 [ 2463.655377][ T5906] crypto_create_tfm_node+0x4a/0x1f0 [ 2463.660656][ T5906] crypto_spawn_tfm2+0x44/0x70 [ 2463.665484][ T5906] ? gcm_decrypt_done+0x190/0x190 [ 2463.670511][ T5906] crypto_rfc4106_init_tfm+0x25/0xa0 16:10:32 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:32 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:32 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2463.675826][ T5906] ? gcm_decrypt_done+0x190/0x190 [ 2463.680916][ T5906] crypto_aead_init_tfm+0x97/0xb0 [ 2463.685950][ T5906] crypto_create_tfm_node+0x93/0x1f0 [ 2463.691273][ T5906] crypto_spawn_tfm2+0x44/0x70 [ 2463.696035][ T5906] aead_init_geniv+0x100/0x160 [ 2463.700796][ T5906] ? aead_geniv_free+0x20/0x20 [ 2463.705559][ T5906] crypto_aead_init_tfm+0x97/0xb0 [ 2463.710662][ T5906] crypto_create_tfm_node+0x93/0x1f0 [ 2463.715946][ T5906] crypto_alloc_tfm_node+0x100/0x290 [ 2463.721313][ T5906] crypto_alloc_aead+0x2b/0x30 16:10:32 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1, {0x0, r10}}, 0x7) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2463.726152][ T5906] esp6_init_state+0x1d2/0x770 [ 2463.730937][ T5906] __xfrm_init_state+0x523/0x810 [ 2463.735904][ T5906] xfrm_add_sa+0x15cf/0x1bd0 [ 2463.740636][ T5906] xfrm_user_rcv_msg+0x31c/0x440 [ 2463.745574][ T5906] ? __d_rehash+0x125/0x180 [ 2463.750100][ T5906] netlink_rcv_skb+0x14e/0x250 [ 2463.754865][ T5906] ? xfrm_netlink_rcv+0x60/0x60 [ 2463.759791][ T5906] xfrm_netlink_rcv+0x43/0x60 [ 2463.764469][ T5906] netlink_unicast+0x5ec/0x6b0 [ 2463.769400][ T5906] netlink_sendmsg+0x6ea/0x7d0 [ 2463.774221][ T5906] ? netlink_getsockopt+0x720/0x720 [ 2463.779591][ T5906] ____sys_sendmsg+0x39a/0x510 [ 2463.784357][ T5906] __sys_sendmsg+0x244/0x2c0 [ 2463.789026][ T5906] __x64_sys_sendmsg+0x42/0x50 [ 2463.793794][ T5906] do_syscall_64+0x44/0xa0 [ 2463.798216][ T5906] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2463.804375][ T5906] RIP: 0033:0x7fec9c2c1709 [ 2463.808783][ T5906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.828504][ T5906] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2463.836964][ T5906] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2463.845003][ T5906] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2463.852959][ T5906] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2463.861034][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2463.869035][ T5906] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2463.894168][ T5904] ================================================================== [ 2463.902260][ T5904] BUG: KCSAN: data-race in ext4_setattr / mpage_process_page_bufs [ 2463.910059][ T5904] [ 2463.912363][ T5904] write to 0xffff88814e663758 of 8 bytes by task 5892 on cpu 0: [ 2463.919972][ T5904] ext4_setattr+0xd7f/0xef0 [ 2463.924463][ T5904] notify_change+0x8a3/0xac0 [ 2463.933856][ T5904] do_truncate+0xf7/0x140 [ 2463.938183][ T5904] path_openat+0x1925/0x1ec0 [ 2463.942757][ T5904] do_filp_open+0x105/0x220 [ 2463.947250][ T5904] do_sys_openat2+0xb5/0x2b0 [ 2463.951834][ T5904] __x64_sys_creat+0x62/0x80 [ 2463.956417][ T5904] do_syscall_64+0x44/0xa0 [ 2463.960834][ T5904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2463.966728][ T5904] [ 2463.969041][ T5904] read to 0xffff88814e663758 of 8 bytes by task 5904 on cpu 1: [ 2463.976574][ T5904] mpage_process_page_bufs+0x34/0x560 [ 2463.981952][ T5904] mpage_prepare_extent_to_map+0x4f6/0x650 [ 2463.987746][ T5904] ext4_writepages+0x706/0x1d70 [ 2463.992590][ T5904] do_writepages+0x26b/0x3c0 [ 2463.997165][ T5904] filemap_write_and_wait_range+0x238/0x3c0 [ 2464.003042][ T5904] ext4_file_write_iter+0xec0/0x11f0 [ 2464.008320][ T5904] aio_write+0x2b4/0x390 [ 2464.012544][ T5904] io_submit_one+0x86f/0x13b0 [ 2464.017288][ T5904] __se_sys_io_submit+0x105/0x270 [ 2464.022297][ T5904] __x64_sys_io_submit+0x3f/0x50 [ 2464.027219][ T5904] do_syscall_64+0x44/0xa0 [ 2464.031622][ T5904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2464.037502][ T5904] [ 2464.039977][ T5904] value changed: 0x0000000000101000 -> 0x0000000000000000 [ 2464.047062][ T5904] [ 2464.049362][ T5904] Reported by Kernel Concurrency Sanitizer on: [ 2464.055925][ T5904] CPU: 1 PID: 5904 Comm: syz-executor.3 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2464.065966][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.076007][ T5904] ================================================================== 16:10:33 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x3a000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:33 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:33 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:33 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/33, 0x21, 0x40010001, &(0x7f0000000240)=@un=@file={0x1, './file1\x00'}, 0x80) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) connect(r6, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x1}}, 0x80) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 11) 16:10:33 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 61) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2464.207298][ T5930] FAULT_INJECTION: forcing a failure. [ 2464.207298][ T5930] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.219933][ T5930] CPU: 1 PID: 5930 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2464.229998][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.236513][ T5931] FAULT_INJECTION: forcing a failure. [ 2464.236513][ T5931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2464.240045][ T5930] Call Trace: [ 2464.240056][ T5930] dump_stack_lvl+0xd6/0x122 [ 2464.240079][ T5930] dump_stack+0x11/0x1b [ 2464.240095][ T5930] should_fail+0x23c/0x250 [ 2464.240111][ T5930] __should_failslab+0x81/0x90 [ 2464.240129][ T5930] should_failslab+0x5/0x20 [ 2464.278869][ T5930] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2464.284575][ T5930] ? __down_read_common+0x17e/0x540 [ 2464.289881][ T5930] ? __kmalloc_node+0x30/0x40 [ 2464.294548][ T5930] __kmalloc_node+0x30/0x40 [ 2464.299047][ T5930] crypto_create_tfm_node+0x4a/0x1f0 [ 2464.304316][ T5930] crypto_spawn_tfm2+0x44/0x70 [ 2464.309074][ T5930] crypto_gcm_init_tfm+0x2e/0x110 [ 2464.314346][ T5930] ? crypto_gcm_create_common+0x4a0/0x4a0 [ 2464.320062][ T5930] crypto_aead_init_tfm+0x97/0xb0 [ 2464.325072][ T5930] crypto_create_tfm_node+0x93/0x1f0 [ 2464.330376][ T5930] crypto_spawn_tfm2+0x44/0x70 [ 2464.335125][ T5930] ? gcm_decrypt_done+0x190/0x190 [ 2464.340177][ T5930] crypto_rfc4106_init_tfm+0x25/0xa0 [ 2464.345469][ T5930] ? gcm_decrypt_done+0x190/0x190 [ 2464.350483][ T5930] crypto_aead_init_tfm+0x97/0xb0 [ 2464.355570][ T5930] crypto_create_tfm_node+0x93/0x1f0 [ 2464.360839][ T5930] crypto_spawn_tfm2+0x44/0x70 [ 2464.365588][ T5930] aead_init_geniv+0x100/0x160 [ 2464.370337][ T5930] ? aead_geniv_free+0x20/0x20 [ 2464.375153][ T5930] crypto_aead_init_tfm+0x97/0xb0 [ 2464.380173][ T5930] crypto_create_tfm_node+0x93/0x1f0 [ 2464.385440][ T5930] crypto_alloc_tfm_node+0x100/0x290 [ 2464.390710][ T5930] crypto_alloc_aead+0x2b/0x30 [ 2464.395504][ T5930] esp6_init_state+0x1d2/0x770 [ 2464.400304][ T5930] __xfrm_init_state+0x523/0x810 [ 2464.405271][ T5930] xfrm_add_sa+0x15cf/0x1bd0 [ 2464.409846][ T5930] xfrm_user_rcv_msg+0x31c/0x440 [ 2464.414770][ T5930] ? __d_rehash+0x125/0x180 [ 2464.419260][ T5930] netlink_rcv_skb+0x14e/0x250 [ 2464.424007][ T5930] ? xfrm_netlink_rcv+0x60/0x60 [ 2464.428844][ T5930] xfrm_netlink_rcv+0x43/0x60 [ 2464.433510][ T5930] netlink_unicast+0x5ec/0x6b0 [ 2464.438322][ T5930] netlink_sendmsg+0x6ea/0x7d0 [ 2464.443068][ T5930] ? netlink_getsockopt+0x720/0x720 [ 2464.448249][ T5930] ____sys_sendmsg+0x39a/0x510 [ 2464.453068][ T5930] __sys_sendmsg+0x244/0x2c0 [ 2464.457656][ T5930] __x64_sys_sendmsg+0x42/0x50 [ 2464.462485][ T5930] do_syscall_64+0x44/0xa0 [ 2464.467030][ T5930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2464.472930][ T5930] RIP: 0033:0x7fec9c2c1709 [ 2464.477325][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.496968][ T5930] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2464.505371][ T5930] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2464.513325][ T5930] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2464.521294][ T5930] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.529246][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.537252][ T5930] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2464.545280][ T5931] CPU: 0 PID: 5931 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2464.555349][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.565411][ T5931] Call Trace: [ 2464.568686][ T5931] dump_stack_lvl+0xd6/0x122 [ 2464.573280][ T5931] dump_stack+0x11/0x1b [ 2464.577435][ T5931] should_fail+0x23c/0x250 [ 2464.581889][ T5931] __alloc_pages+0x102/0x320 [ 2464.586483][ T5931] alloc_pages+0x382/0x3d0 [ 2464.590898][ T5931] __page_cache_alloc+0x4d/0xf0 [ 2464.595742][ T5931] page_cache_ra_unbounded+0x1be/0x430 [ 2464.601274][ T5931] ondemand_readahead+0x58c/0x7c0 [ 2464.606368][ T5931] page_cache_async_ra+0x17e/0x1a0 [ 2464.611525][ T5931] do_async_mmap_readahead+0x211/0x250 [ 2464.616999][ T5931] filemap_fault+0x106/0x9f0 [ 2464.621706][ T5931] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2464.628051][ T5931] ? cgroup_rstat_updated+0x34/0x100 [ 2464.633343][ T5931] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2464.638971][ T5931] handle_mm_fault+0xc81/0x1580 [ 2464.643309][ T5942] FAULT_INJECTION: forcing a failure. [ 2464.643309][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.643828][ T5931] do_user_addr_fault+0x609/0xbe0 [ 2464.643851][ T5931] exc_page_fault+0x91/0x220 [ 2464.666059][ T5931] asm_exc_page_fault+0x1e/0x30 [ 2464.670902][ T5931] RIP: 0010:clear_user+0x60/0xa0 [ 2464.675825][ T5931] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2464.695488][ T5931] RSP: 0018:ffffc9000506fbb8 EFLAGS: 00010202 [ 2464.701535][ T5931] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2464.709498][ T5931] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2464.717452][ T5931] RBP: ffffc9000506fe58 R08: ffffffff819810e6 R09: 0001c9000506fe57 [ 2464.725584][ T5931] R10: 0000000000000004 R11: ffff88814d9c8000 R12: 0000000020020380 [ 2464.733541][ T5931] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2464.741509][ T5931] ? clear_user+0x36/0xa0 [ 2464.745827][ T5931] ? clear_user+0x48/0xa0 [ 2464.750143][ T5931] iov_iter_zero+0x11b/0xb20 [ 2464.754718][ T5931] ? should_fail+0xd6/0x250 [ 2464.759205][ T5931] read_iter_zero+0x63/0x180 [ 2464.763793][ T5931] do_iter_readv_writev+0x2fb/0x380 [ 2464.769010][ T5931] do_iter_read+0x192/0x5d0 [ 2464.773499][ T5931] ? import_iovec+0x69/0x80 [ 2464.778058][ T5931] do_readv+0x171/0x2c0 [ 2464.782210][ T5931] ? vfs_write+0x61a/0x900 [ 2464.786677][ T5931] __x64_sys_readv+0x41/0x50 [ 2464.791300][ T5931] do_syscall_64+0x44/0xa0 [ 2464.795709][ T5931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2464.801599][ T5931] RIP: 0033:0x7f4fc1ace709 [ 2464.806003][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.825639][ T5931] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2464.834127][ T5931] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2464.842096][ T5931] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2464.850050][ T5931] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 16:10:33 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:33 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 12) [ 2464.858067][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.866020][ T5931] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2464.873981][ T5942] CPU: 1 PID: 5942 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2464.884093][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.894170][ T5942] Call Trace: [ 2464.897449][ T5942] dump_stack_lvl+0xd6/0x122 [ 2464.902132][ T5942] dump_stack+0x11/0x1b [ 2464.906328][ T5942] should_fail+0x23c/0x250 [ 2464.910749][ T5942] __should_failslab+0x81/0x90 [ 2464.915567][ T5942] should_failslab+0x5/0x20 [ 2464.920146][ T5942] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2464.925929][ T5942] ? __kmalloc_node+0x30/0x40 [ 2464.930649][ T5942] __kmalloc_node+0x30/0x40 [ 2464.935148][ T5942] crypto_create_tfm_node+0x4a/0x1f0 [ 2464.940436][ T5942] crypto_init_shash_ops_async+0x3e/0x190 [ 2464.946188][ T5942] crypto_ahash_init_tfm+0x5e/0x230 [ 2464.951425][ T5942] crypto_create_tfm_node+0x93/0x1f0 [ 2464.956714][ T5942] crypto_spawn_tfm2+0x44/0x70 [ 2464.961554][ T5942] crypto_gcm_init_tfm+0x2e/0x110 [ 2464.966589][ T5942] ? crypto_gcm_create_common+0x4a0/0x4a0 [ 2464.972309][ T5942] crypto_aead_init_tfm+0x97/0xb0 [ 2464.977334][ T5942] crypto_create_tfm_node+0x93/0x1f0 [ 2464.982705][ T5942] crypto_spawn_tfm2+0x44/0x70 [ 2464.987468][ T5942] ? gcm_decrypt_done+0x190/0x190 [ 2464.992487][ T5942] crypto_rfc4106_init_tfm+0x25/0xa0 [ 2464.997776][ T5942] ? gcm_decrypt_done+0x190/0x190 [ 2465.002803][ T5942] crypto_aead_init_tfm+0x97/0xb0 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:34 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:34 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee5000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) syz_io_uring_setup(0xf77, &(0x7f0000000380)={0x0, 0xc2d, 0x8, 0x3, 0x16c}, &(0x7f00006d8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r6, 0x8, &(0x7f0000000180)="58dc16015584febee594d36aacfc743be1659da527fa383ced2a5d571d5f3d9a3b7078c3570602a7a6628f3eb8ef3d2fb326", 0x32, 0x17, 0x0, {0x0, r7}}, 0x6) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2465.007827][ T5942] crypto_create_tfm_node+0x93/0x1f0 [ 2465.013184][ T5942] crypto_spawn_tfm2+0x44/0x70 [ 2465.017944][ T5942] aead_init_geniv+0x100/0x160 [ 2465.022733][ T5942] ? aead_geniv_free+0x20/0x20 [ 2465.027491][ T5942] crypto_aead_init_tfm+0x97/0xb0 [ 2465.032518][ T5942] crypto_create_tfm_node+0x93/0x1f0 [ 2465.037805][ T5942] crypto_alloc_tfm_node+0x100/0x290 [ 2465.043089][ T5942] crypto_alloc_aead+0x2b/0x30 [ 2465.047877][ T5942] esp6_init_state+0x1d2/0x770 [ 2465.052638][ T5942] __xfrm_init_state+0x523/0x810 [ 2465.057574][ T5942] xfrm_add_sa+0x15cf/0x1bd0 [ 2465.062167][ T5942] xfrm_user_rcv_msg+0x31c/0x440 [ 2465.067126][ T5942] ? __d_rehash+0x125/0x180 [ 2465.071673][ T5942] netlink_rcv_skb+0x14e/0x250 [ 2465.076518][ T5942] ? xfrm_netlink_rcv+0x60/0x60 [ 2465.081422][ T5942] xfrm_netlink_rcv+0x43/0x60 [ 2465.086160][ T5942] netlink_unicast+0x5ec/0x6b0 [ 2465.090924][ T5942] netlink_sendmsg+0x6ea/0x7d0 [ 2465.095688][ T5942] ? netlink_getsockopt+0x720/0x720 [ 2465.100960][ T5942] ____sys_sendmsg+0x39a/0x510 [ 2465.105722][ T5942] __sys_sendmsg+0x244/0x2c0 [ 2465.110361][ T5942] __x64_sys_sendmsg+0x42/0x50 [ 2465.115130][ T5942] do_syscall_64+0x44/0xa0 [ 2465.119558][ T5942] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2465.125505][ T5942] RIP: 0033:0x7fec9c2c1709 [ 2465.129912][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.149513][ T5942] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2465.158008][ T5942] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2465.165965][ T5942] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2465.173919][ T5942] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2465.181866][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2465.189815][ T5942] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:34 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x3b000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:34 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:34 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000580)=""/7, 0x7}, {&(0x7f00000005c0)=""/168, 0xa8}], 0x6, &(0x7f0000002500)=""/4096, 0x1000}, 0x0, 0x8001, 0x1, {0x1}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x7506, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x9) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eea000/0x1000)=nil, 0x1000, 0x11, 0x1}, 0x7) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x20) dup2(r7, r0) 16:10:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 13) 16:10:34 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 62) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2465.326191][ T5965] FAULT_INJECTION: forcing a failure. [ 2465.326191][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.338870][ T5965] CPU: 1 PID: 5965 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2465.348933][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.359025][ T5965] Call Trace: [ 2465.362294][ T5965] dump_stack_lvl+0xd6/0x122 [ 2465.366888][ T5965] dump_stack+0x11/0x1b [ 2465.371046][ T5965] should_fail+0x23c/0x250 [ 2465.375463][ T5965] __should_failslab+0x81/0x90 [ 2465.380271][ T5965] should_failslab+0x5/0x20 [ 2465.384771][ T5965] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 2465.390487][ T5965] ? __down_read_common+0x17e/0x540 [ 2465.395678][ T5965] ? __kmalloc_node+0x30/0x40 [ 2465.400350][ T5965] __kmalloc_node+0x30/0x40 [ 2465.404851][ T5965] crypto_create_tfm_node+0x4a/0x1f0 [ 2465.410271][ T5965] crypto_spawn_tfm2+0x44/0x70 [ 2465.415081][ T5965] crypto_gcm_init_tfm+0x56/0x110 [ 2465.420118][ T5965] ? crypto_gcm_create_common+0x4a0/0x4a0 [ 2465.425909][ T5965] crypto_aead_init_tfm+0x97/0xb0 [ 2465.430937][ T5965] crypto_create_tfm_node+0x93/0x1f0 [ 2465.436221][ T5965] crypto_spawn_tfm2+0x44/0x70 [ 2465.441016][ T5965] ? gcm_decrypt_done+0x190/0x190 [ 2465.446046][ T5965] crypto_rfc4106_init_tfm+0x25/0xa0 [ 2465.451427][ T5965] ? gcm_decrypt_done+0x190/0x190 [ 2465.456492][ T5965] crypto_aead_init_tfm+0x97/0xb0 [ 2465.461514][ T5965] crypto_create_tfm_node+0x93/0x1f0 [ 2465.466855][ T5965] crypto_spawn_tfm2+0x44/0x70 [ 2465.471727][ T5965] aead_init_geniv+0x100/0x160 [ 2465.476492][ T5965] ? aead_geniv_free+0x20/0x20 [ 2465.481329][ T5965] crypto_aead_init_tfm+0x97/0xb0 [ 2465.486404][ T5965] crypto_create_tfm_node+0x93/0x1f0 [ 2465.491744][ T5965] crypto_alloc_tfm_node+0x100/0x290 [ 2465.497022][ T5965] crypto_alloc_aead+0x2b/0x30 [ 2465.501783][ T5965] esp6_init_state+0x1d2/0x770 [ 2465.506549][ T5965] __xfrm_init_state+0x523/0x810 [ 2465.511508][ T5965] xfrm_add_sa+0x15cf/0x1bd0 [ 2465.516265][ T5965] xfrm_user_rcv_msg+0x31c/0x440 [ 2465.521209][ T5965] ? __d_rehash+0x125/0x180 [ 2465.525718][ T5965] netlink_rcv_skb+0x14e/0x250 [ 2465.530562][ T5965] ? xfrm_netlink_rcv+0x60/0x60 [ 2465.535502][ T5965] xfrm_netlink_rcv+0x43/0x60 [ 2465.540264][ T5965] netlink_unicast+0x5ec/0x6b0 [ 2465.545028][ T5965] netlink_sendmsg+0x6ea/0x7d0 [ 2465.549826][ T5965] ? netlink_getsockopt+0x720/0x720 [ 2465.555022][ T5965] ____sys_sendmsg+0x39a/0x510 [ 2465.559799][ T5965] __sys_sendmsg+0x244/0x2c0 [ 2465.564404][ T5965] __x64_sys_sendmsg+0x42/0x50 [ 2465.569168][ T5965] do_syscall_64+0x44/0xa0 [ 2465.573631][ T5965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2465.579548][ T5965] RIP: 0033:0x7fec9c2c1709 [ 2465.583957][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.603622][ T5965] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2465.612129][ T5965] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:34 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2465.620196][ T5965] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2465.628169][ T5965] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2465.636141][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2465.644150][ T5965] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:34 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2465.698287][ T5992] FAULT_INJECTION: forcing a failure. [ 2465.698287][ T5992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2465.711554][ T5992] CPU: 0 PID: 5992 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2465.721614][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.731699][ T5992] Call Trace: [ 2465.735035][ T5992] dump_stack_lvl+0xd6/0x122 [ 2465.739624][ T5992] dump_stack+0x11/0x1b [ 2465.743783][ T5992] should_fail+0x23c/0x250 [ 2465.748202][ T5992] __alloc_pages+0x102/0x320 [ 2465.752802][ T5992] alloc_pages+0x382/0x3d0 [ 2465.757225][ T5992] __page_cache_alloc+0x4d/0xf0 [ 2465.762082][ T5992] page_cache_ra_unbounded+0x1be/0x430 [ 2465.767523][ T5992] ondemand_readahead+0x58c/0x7c0 [ 2465.772592][ T5992] page_cache_async_ra+0x17e/0x1a0 [ 2465.777685][ T5992] do_async_mmap_readahead+0x211/0x250 [ 2465.783185][ T5992] filemap_fault+0x106/0x9f0 [ 2465.787868][ T5992] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2465.794192][ T5992] ? cgroup_rstat_updated+0x34/0x100 [ 2465.799462][ T5992] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2465.805098][ T5992] handle_mm_fault+0xc81/0x1580 [ 2465.809935][ T5992] do_user_addr_fault+0x609/0xbe0 [ 2465.815064][ T5992] exc_page_fault+0x91/0x220 [ 2465.819701][ T5992] asm_exc_page_fault+0x1e/0x30 [ 2465.824644][ T5992] RIP: 0010:clear_user+0x60/0xa0 [ 2465.829576][ T5992] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2465.849162][ T5992] RSP: 0018:ffffc9000507fbb8 EFLAGS: 00010202 [ 2465.855390][ T5992] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2465.863346][ T5992] RDX: ffffc9000f42d000 RSI: 0000000000002d79 RDI: 0000000020020000 [ 2465.871299][ T5992] RBP: ffffc9000507fe58 R08: ffffffff819810e6 R09: 0001c9000507fe57 [ 2465.879349][ T5992] R10: 0000000000000004 R11: ffff888126d4d080 R12: 0000000020020380 [ 2465.887312][ T5992] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2465.895264][ T5992] ? clear_user+0x36/0xa0 [ 2465.899573][ T5992] ? clear_user+0x48/0xa0 [ 2465.903955][ T5992] iov_iter_zero+0x11b/0xb20 [ 2465.908526][ T5992] ? should_fail+0xd6/0x250 [ 2465.913008][ T5992] read_iter_zero+0x63/0x180 [ 2465.917577][ T5992] do_iter_readv_writev+0x2fb/0x380 [ 2465.922772][ T5992] do_iter_read+0x192/0x5d0 [ 2465.927309][ T5992] ? import_iovec+0x69/0x80 [ 2465.931932][ T5992] do_readv+0x171/0x2c0 [ 2465.936070][ T5992] ? vfs_write+0x61a/0x900 [ 2465.940639][ T5992] __x64_sys_readv+0x41/0x50 [ 2465.945205][ T5992] do_syscall_64+0x44/0xa0 [ 2465.949733][ T5992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2465.955644][ T5992] RIP: 0033:0x7f4fc1ace709 [ 2465.960039][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.979627][ T5992] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2465.988089][ T5992] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2465.996134][ T5992] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2466.004149][ T5992] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.012101][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.020051][ T5992] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 16:10:35 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x3c000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:35 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 14) 16:10:35 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:35 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x40, 0x29a}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000400)={r4, 0x5, 0x1, 0x100000001}) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r7, &(0x7f0000008500)={0x501000, 0x0, 0x8}, &(0x7f0000008580)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) getsockname(r4, &(0x7f00000085c0)=@can, &(0x7f0000008640)=0x80) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000082c0)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000000400)}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f00000008c0)=""/68, 0x44}, {&(0x7f0000000940)=""/197, 0xc5}, {&(0x7f0000000a40)=""/172, 0xac}, {&(0x7f0000000b00)=""/129, 0x81}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/143, 0x8f}], 0x2, &(0x7f0000000f80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001180)=""/91, 0x5b}, {&(0x7f0000001200)=""/36, 0x24}, {&(0x7f0000001240)=""/214, 0xd6}, {&(0x7f0000001340)=""/46, 0x2e}, {&(0x7f0000001380)=""/42, 0x2a}, {&(0x7f00000013c0)=""/30, 0x1e}], 0x6, &(0x7f0000001480)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000003500), 0x6e, &(0x7f0000003640)=[{&(0x7f0000003580)=""/189, 0xbd}], 0x1, &(0x7f0000003680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/18, 0x12}, {&(0x7f0000003800)=""/155, 0x9b}, {&(0x7f00000038c0)=""/25, 0x19}, {&(0x7f0000003900)=""/10, 0xa}, {&(0x7f0000003940)=""/40, 0x28}, {&(0x7f0000003980)=""/40, 0x28}, {&(0x7f00000039c0)=""/252, 0xfc}, {&(0x7f0000003ac0)=""/78, 0x4e}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0xa}}, {{&(0x7f0000004c00), 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004c80)=""/209, 0xd1}, {&(0x7f0000004d80)=""/64, 0x40}], 0x2, &(0x7f0000004e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000004e80)=@abs, 0x6e, &(0x7f0000008180)=[{&(0x7f0000004f00)=""/48, 0x30}, {&(0x7f0000004f40)=""/244, 0xf4}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/105, 0x69}, {&(0x7f00000070c0)=""/140, 0x8c}, {&(0x7f0000007180)=""/4096, 0x1000}], 0x7, &(0x7f0000008200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}], 0x8, 0x40000002, &(0x7f00000084c0)={0x77359400}) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) [ 2466.127768][ T6010] FAULT_INJECTION: forcing a failure. [ 2466.127768][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.140984][ T6010] CPU: 0 PID: 6010 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2466.151083][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.161169][ T6010] Call Trace: [ 2466.164456][ T6010] dump_stack_lvl+0xd6/0x122 [ 2466.169110][ T6010] dump_stack+0x11/0x1b [ 2466.173345][ T6010] should_fail+0x23c/0x250 16:10:35 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 63) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:35 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2466.177760][ T6010] ? __crypto_alloc_tfm+0xc6/0x290 [ 2466.182887][ T6010] __should_failslab+0x81/0x90 [ 2466.187657][ T6010] should_failslab+0x5/0x20 [ 2466.192197][ T6010] __kmalloc+0x6f/0x350 [ 2466.196353][ T6010] __crypto_alloc_tfm+0xc6/0x290 [ 2466.201306][ T6010] crypto_spawn_tfm+0x62/0xa0 [ 2466.206064][ T6010] ? skcipher_setkey_simple+0x90/0x90 [ 2466.211443][ T6010] skcipher_init_tfm_simple+0x2c/0x60 [ 2466.216850][ T6010] ? skcipher_setkey_simple+0x90/0x90 [ 2466.222225][ T6010] crypto_skcipher_init_tfm+0xad/0xc0 16:10:35 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r3 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2466.227663][ T6010] crypto_create_tfm_node+0x93/0x1f0 [ 2466.233012][ T6010] crypto_spawn_tfm2+0x44/0x70 [ 2466.237778][ T6010] crypto_gcm_init_tfm+0x56/0x110 [ 2466.242811][ T6010] ? crypto_gcm_create_common+0x4a0/0x4a0 [ 2466.248598][ T6010] crypto_aead_init_tfm+0x97/0xb0 [ 2466.253630][ T6010] crypto_create_tfm_node+0x93/0x1f0 [ 2466.258938][ T6010] crypto_spawn_tfm2+0x44/0x70 [ 2466.263707][ T6010] ? gcm_decrypt_done+0x190/0x190 [ 2466.268731][ T6010] crypto_rfc4106_init_tfm+0x25/0xa0 [ 2466.274016][ T6010] ? gcm_decrypt_done+0x190/0x190 [ 2466.278400][ T6021] FAULT_INJECTION: forcing a failure. [ 2466.278400][ T6021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2466.279047][ T6010] crypto_aead_init_tfm+0x97/0xb0 [ 2466.297308][ T6010] crypto_create_tfm_node+0x93/0x1f0 [ 2466.302592][ T6010] crypto_spawn_tfm2+0x44/0x70 [ 2466.307349][ T6010] aead_init_geniv+0x100/0x160 [ 2466.312142][ T6010] ? aead_geniv_free+0x20/0x20 [ 2466.316896][ T6010] crypto_aead_init_tfm+0x97/0xb0 [ 2466.321909][ T6010] crypto_create_tfm_node+0x93/0x1f0 [ 2466.327212][ T6010] crypto_alloc_tfm_node+0x100/0x290 [ 2466.332523][ T6010] crypto_alloc_aead+0x2b/0x30 [ 2466.337292][ T6010] esp6_init_state+0x1d2/0x770 [ 2466.342087][ T6010] __xfrm_init_state+0x523/0x810 [ 2466.347009][ T6010] xfrm_add_sa+0x15cf/0x1bd0 [ 2466.351630][ T6010] xfrm_user_rcv_msg+0x31c/0x440 [ 2466.356553][ T6010] ? __d_rehash+0x125/0x180 [ 2466.361154][ T6010] netlink_rcv_skb+0x14e/0x250 [ 2466.365906][ T6010] ? xfrm_netlink_rcv+0x60/0x60 [ 2466.370757][ T6010] xfrm_netlink_rcv+0x43/0x60 [ 2466.375423][ T6010] netlink_unicast+0x5ec/0x6b0 [ 2466.380172][ T6010] netlink_sendmsg+0x6ea/0x7d0 [ 2466.384949][ T6010] ? netlink_getsockopt+0x720/0x720 [ 2466.390136][ T6010] ____sys_sendmsg+0x39a/0x510 [ 2466.394903][ T6010] __sys_sendmsg+0x244/0x2c0 [ 2466.399542][ T6010] __x64_sys_sendmsg+0x42/0x50 [ 2466.404293][ T6010] do_syscall_64+0x44/0xa0 [ 2466.408698][ T6010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.414582][ T6010] RIP: 0033:0x7fec9c2c1709 [ 2466.418993][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.438584][ T6010] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2466.447057][ T6010] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2466.455028][ T6010] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2466.462982][ T6010] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.470937][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.478892][ T6010] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2466.486854][ T6021] CPU: 1 PID: 6021 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2466.496916][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.507127][ T6021] Call Trace: [ 2466.510400][ T6021] dump_stack_lvl+0xd6/0x122 [ 2466.514990][ T6021] dump_stack+0x11/0x1b [ 2466.519138][ T6021] should_fail+0x23c/0x250 [ 2466.523545][ T6021] __alloc_pages+0x102/0x320 [ 2466.528134][ T6021] alloc_pages+0x382/0x3d0 [ 2466.532656][ T6021] __page_cache_alloc+0x4d/0xf0 [ 2466.537504][ T6021] page_cache_ra_unbounded+0x1be/0x430 [ 2466.542959][ T6021] ondemand_readahead+0x58c/0x7c0 [ 2466.547978][ T6021] page_cache_async_ra+0x17e/0x1a0 [ 2466.553168][ T6021] do_async_mmap_readahead+0x211/0x250 [ 2466.558629][ T6021] filemap_fault+0x106/0x9f0 [ 2466.563221][ T6021] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2466.569544][ T6021] ? cgroup_rstat_updated+0x34/0x100 16:10:35 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 15) 16:10:35 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:35 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r6 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x401) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x101}, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2466.574832][ T6021] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2466.580394][ T6021] handle_mm_fault+0xc81/0x1580 [ 2466.585242][ T6021] do_user_addr_fault+0x609/0xbe0 [ 2466.590269][ T6021] exc_page_fault+0x91/0x220 [ 2466.594856][ T6021] asm_exc_page_fault+0x1e/0x30 [ 2466.599776][ T6021] RIP: 0010:clear_user+0x60/0xa0 [ 2466.604712][ T6021] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2466.624347][ T6021] RSP: 0018:ffffc900051ffbb8 EFLAGS: 00010202 [ 2466.630405][ T6021] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2466.638376][ T6021] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2466.639484][ T6035] FAULT_INJECTION: forcing a failure. [ 2466.639484][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.646341][ T6021] RBP: ffffc900051ffe58 R08: ffffffff819810e6 R09: 0001c900051ffe57 [ 2466.646357][ T6021] R10: 0000000000000004 R11: ffff88814d46c040 R12: 0000000020020380 [ 2466.646370][ T6021] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2466.682767][ T6021] ? clear_user+0x36/0xa0 [ 2466.687089][ T6021] ? clear_user+0x48/0xa0 [ 2466.691518][ T6021] iov_iter_zero+0x11b/0xb20 [ 2466.696162][ T6021] ? should_fail+0xd6/0x250 [ 2466.700713][ T6021] read_iter_zero+0x63/0x180 [ 2466.705290][ T6021] do_iter_readv_writev+0x2fb/0x380 [ 2466.710551][ T6021] do_iter_read+0x192/0x5d0 [ 2466.715041][ T6021] ? import_iovec+0x69/0x80 [ 2466.719540][ T6021] do_readv+0x171/0x2c0 [ 2466.723744][ T6021] ? vfs_write+0x61a/0x900 [ 2466.728143][ T6021] __x64_sys_readv+0x41/0x50 [ 2466.732718][ T6021] do_syscall_64+0x44/0xa0 [ 2466.737175][ T6021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.743081][ T6021] RIP: 0033:0x7f4fc1ace709 [ 2466.747485][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.767093][ T6021] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2466.775504][ T6021] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2466.783459][ T6021] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2466.791412][ T6021] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.799369][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.807323][ T6021] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2466.815282][ T6035] CPU: 0 PID: 6035 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2466.825348][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.835402][ T6035] Call Trace: [ 2466.838680][ T6035] dump_stack_lvl+0xd6/0x122 [ 2466.843275][ T6035] dump_stack+0x11/0x1b [ 2466.847436][ T6035] should_fail+0x23c/0x250 [ 2466.851851][ T6035] ? crypto_gcm_setkey+0xcf/0x2c0 [ 2466.856912][ T6035] __should_failslab+0x81/0x90 [ 2466.861676][ T6035] should_failslab+0x5/0x20 [ 2466.866260][ T6035] __kmalloc+0x6f/0x350 [ 2466.870527][ T6035] crypto_gcm_setkey+0xcf/0x2c0 [ 2466.875388][ T6035] crypto_aead_setkey+0xe6/0x170 [ 2466.880326][ T6035] crypto_rfc4106_setkey+0xcc/0xe0 [ 2466.885439][ T6035] crypto_aead_setkey+0xe6/0x170 [ 2466.890416][ T6035] aead_geniv_setkey+0x2a/0x30 [ 2466.895208][ T6035] crypto_aead_setkey+0xe6/0x170 [ 2466.900236][ T6035] esp6_init_state+0x225/0x770 [ 2466.905043][ T6035] __xfrm_init_state+0x523/0x810 [ 2466.910068][ T6035] xfrm_add_sa+0x15cf/0x1bd0 [ 2466.914663][ T6035] xfrm_user_rcv_msg+0x31c/0x440 [ 2466.919676][ T6035] ? __d_rehash+0x125/0x180 [ 2466.924208][ T6035] netlink_rcv_skb+0x14e/0x250 [ 2466.928957][ T6035] ? xfrm_netlink_rcv+0x60/0x60 [ 2466.933786][ T6035] xfrm_netlink_rcv+0x43/0x60 [ 2466.938445][ T6035] netlink_unicast+0x5ec/0x6b0 [ 2466.943238][ T6035] netlink_sendmsg+0x6ea/0x7d0 [ 2466.947985][ T6035] ? netlink_getsockopt+0x720/0x720 [ 2466.953182][ T6035] ____sys_sendmsg+0x39a/0x510 [ 2466.957943][ T6035] __sys_sendmsg+0x244/0x2c0 [ 2466.962628][ T6035] __x64_sys_sendmsg+0x42/0x50 [ 2466.967440][ T6035] do_syscall_64+0x44/0xa0 [ 2466.971842][ T6035] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2466.977734][ T6035] RIP: 0033:0x7fec9c2c1709 [ 2466.982133][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.001735][ T6035] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2467.010193][ T6035] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2467.018164][ T6035] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2467.026127][ T6035] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.034219][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2467.042183][ T6035] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 16:10:36 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x3d000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 16:10:36 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x7}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x6, 0x8040) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6fe814c8e30d2db8, @fd=r6, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f00000005c0)=""/227, 0xe3}], 0x5, 0x0, 0x1}, 0xb0e) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000740), &(0x7f0000000780)={'L-', 0x200}, 0x16, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r8 = syz_io_uring_setup(0x84, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x401) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x111217494af055bf, 0x4007, @fd, 0x9, &(0x7f00000007c0)="21dee40cb1367db2a81bdca762b297fbe3ff2cf0209ecc8a81e07bafb348374f65e783f1fca94ffa3a023115f07c4ae5c4e0e9230af0dd3adae131b38c039a328c600b24826ed51fea4f11c4c23e13dfb7ac85dde21c564d80f5dc0779a6508bb7997c0e53d703ce24c52ab79301f599c36438b881f5eed9fef6be20503887226a789e8aca372ce3de91ecb5f4d2d817d285af841ad138e9d9cf868c838422347b4509d93d516ee513c0f5f3cc39c04d", 0xb0, 0x0, 0x1, {0x0, r11}}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS, 0x0) 16:10:36 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:36 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 16) 16:10:36 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) (fail_nth: 64) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x75, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2467.146634][ T6051] FAULT_INJECTION: forcing a failure. [ 2467.146634][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.159382][ T6051] CPU: 1 PID: 6051 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2467.169471][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.179520][ T6051] Call Trace: [ 2467.182792][ T6051] dump_stack_lvl+0xd6/0x122 [ 2467.187381][ T6051] dump_stack+0x11/0x1b [ 2467.191570][ T6051] should_fail+0x23c/0x250 [ 2467.195979][ T6051] __should_failslab+0x81/0x90 [ 2467.200740][ T6051] ? gf128mul_init_4k_lle+0x38/0x420 [ 2467.206165][ T6051] should_failslab+0x5/0x20 [ 2467.210663][ T6051] kmem_cache_alloc_trace+0x52/0x320 [ 2467.215952][ T6051] ? skcipher_walk_done+0x294/0x530 [ 2467.221150][ T6051] gf128mul_init_4k_lle+0x38/0x420 [ 2467.226339][ T6051] ? crypto_aes_set_key+0x30/0x30 [ 2467.231360][ T6051] ghash_setkey+0x99/0xf0 [ 2467.235692][ T6051] crypto_shash_setkey+0xcb/0x1b0 [ 2467.240715][ T6051] shash_async_setkey+0x2a/0x30 16:10:36 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 16:10:36 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) [ 2467.245562][ T6051] crypto_ahash_setkey+0xc5/0x1b0 [ 2467.250592][ T6051] crypto_gcm_setkey+0x296/0x2c0 [ 2467.255568][ T6051] crypto_aead_setkey+0xe6/0x170 [ 2467.260500][ T6051] crypto_rfc4106_setkey+0xcc/0xe0 [ 2467.265609][ T6051] crypto_aead_setkey+0xe6/0x170 [ 2467.270546][ T6051] aead_geniv_setkey+0x2a/0x30 [ 2467.275307][ T6051] crypto_aead_setkey+0xe6/0x170 [ 2467.280250][ T6051] esp6_init_state+0x225/0x770 [ 2467.285015][ T6051] __xfrm_init_state+0x523/0x810 [ 2467.289959][ T6051] xfrm_add_sa+0x15cf/0x1bd0 16:10:36 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2467.294553][ T6051] xfrm_user_rcv_msg+0x31c/0x440 [ 2467.299488][ T6051] ? __d_rehash+0x125/0x180 [ 2467.303988][ T6051] netlink_rcv_skb+0x14e/0x250 [ 2467.308747][ T6051] ? xfrm_netlink_rcv+0x60/0x60 [ 2467.313600][ T6051] xfrm_netlink_rcv+0x43/0x60 [ 2467.318275][ T6051] netlink_unicast+0x5ec/0x6b0 [ 2467.318644][ T6052] FAULT_INJECTION: forcing a failure. [ 2467.318644][ T6052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2467.323061][ T6051] netlink_sendmsg+0x6ea/0x7d0 [ 2467.341079][ T6051] ? netlink_getsockopt+0x720/0x720 [ 2467.346356][ T6051] ____sys_sendmsg+0x39a/0x510 [ 2467.351107][ T6051] __sys_sendmsg+0x244/0x2c0 [ 2467.355690][ T6051] __x64_sys_sendmsg+0x42/0x50 [ 2467.360438][ T6051] do_syscall_64+0x44/0xa0 [ 2467.364842][ T6051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.370731][ T6051] RIP: 0033:0x7fec9c2c1709 [ 2467.375125][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.395307][ T6051] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2467.403712][ T6051] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 [ 2467.411678][ T6051] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 2467.419632][ T6051] RBP: 00007fec9a0391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.427596][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2467.435647][ T6051] R13: 00007ffe1b9ca1df R14: 00007fec9a039300 R15: 0000000000022000 [ 2467.443607][ T6052] CPU: 0 PID: 6052 Comm: syz-executor.4 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2467.453717][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.463780][ T6052] Call Trace: [ 2467.463789][ T6052] dump_stack_lvl+0xd6/0x122 [ 2467.463891][ T6052] dump_stack+0x11/0x1b 16:10:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 17) 16:10:36 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:36 executing program 5: r0 = syz_io_uring_setup(0xf5c, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="0414c43827a973405915d64403d5d1676941d88332d75df4eba8280a5afad690acceadae532a95e298487bba7ee244a7d25be2d9fb9775f2b941b0caef4131573f708e4743e42851a63e855df2a25568ff021f13d5772e44103adc213f9e0a7b523ff39e15e1f3425cf76b18c4d1bb222b72999df09e95cdbc6a3b6ea75b4f564818faa94f4a20c4784444694c5d64c82af777a887ff502a56e0507690da145b47095a7a63d980b24f5eeb12d523fff71adb65438b0e718f82e4ac1f93eacd8fc8fc1bf759e3bef28bdf573ddd0444d565b8afa87c4c21eef3d51f82092bf5a1", 0xe0, 0x40000061, 0x1}, 0x3e) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000003240)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000029c0)={&(0x7f0000000f00)=@ll={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @random="251e80bc21c5"}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000f80)="6512acd70ee5baea689f1fa268fb5fcbba53463491ccf26386b3d54e9f747f489bf5bbfa0e2569bc3f276498976f949763d6638a9df19205d3c4809680463db0a4c254fe6358702638ef7c8130c03a34e940f35f96131b47fe7399a68ebbd76d", 0x60}, {&(0x7f0000000d00)="6b109805658f08", 0x7}, {&(0x7f0000002e80)="d479c2bfffc4ee483f9e8d9688cca3ec7aeef394dcb903da0829f6f4daeac00dd34fbac7ca6900fe4cedb20e6e16d2b262aa52583f618aacba9e15ca6b5baf691821cee01b089562496c690fe6acd2a2b4f438ca779d58043a862cd7d8ec4c0d2313e1902bf7a2cd4e5b06cd214700f38e6646b4ccdcaeef7ede5bda46880ee68fd4", 0x82}, {&(0x7f0000002f40)="f449f3dc56a616ba95451392bc172683c1f652610a6beec34e7f1c0d9bb4e91d3427da3332bdd1fd7916502987d93b78442f1b731b0c55a2f5eb1fcf61ab2e434e6f343b6d741c9e2152a5da0c843060a4429acacb14cc92ebedd35c4e5cba26683ab72ead3acead1367a61f5a4edc13566e1306fbba3a59d0b12e6a3e09578bdc0261323a3c2c92d1ebc1ddc9a9cafb466d68546a13c20b459a9c58b564ea2f76e77c8998917325e0541af046fed313043512ebcffc723449824b349bc536c458dfb3ac051a3ff05ead447fb88ca801d47f37d3e79c", 0xd6}, {&(0x7f0000003040)="9ae13f0cf3ed8a7d40c94b86e5ca76f6cbc5a968d41e9a88f62b267127c3ff1ff74c235ff6cfa89265239a658a45351fabedc59bf3fa7639e71fec0e24460bc992fa0906a63664db82168a612f7ec9d918ac677a66f047a6be0c203002f38fef49f9a7111daea50dc6c4d001197972531a9a397c0855f7304df6ca4b8f7b15740df9f3cd7365098eca611a87ecd9777962014fbcb36f66fd7720721816d9ed507c6306eb14a22348e83a0669816d10a76f25aeb2d9ff1286eb27cbee7963902b695b55752d7f2e85e45efa5a3ed842a1c6e0d90859273f2dd93fedb0d080f0", 0xdf}, {&(0x7f0000001000)="5425303ec7739a492e33cd700bdad83e22a1e7b63e", 0x15}, {&(0x7f0000003140)="b91295227788e182be42778c6def1dbfd6617d241f98cc15d032a0cfa78e5848f2427bbfb437049f1463309e889b864218d88095dad1d159f775b83630323f1fc2b030f6a0e588c30e947b0f020b9b308b561e0af2dd6c46ef42d01ed4bddfbd9db639076b16e63bc0480a92e8ea740c6727fd233a8fe2d7", 0x78}], 0x7, &(0x7f0000002600)=[{0x18, 0x101, 0x6, "8139"}], 0x18}, 0x0, 0x1, 0x1}, 0xfda) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000014c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) [ 2467.463904][ T6052] should_fail+0x23c/0x250 [ 2467.463918][ T6052] __alloc_pages+0x102/0x320 [ 2467.463935][ T6052] alloc_pages+0x382/0x3d0 [ 2467.463952][ T6052] __page_cache_alloc+0x4d/0xf0 [ 2467.464016][ T6052] page_cache_ra_unbounded+0x1be/0x430 [ 2467.464079][ T6052] ondemand_readahead+0x58c/0x7c0 [ 2467.464102][ T6052] page_cache_async_ra+0x17e/0x1a0 [ 2467.464121][ T6052] do_async_mmap_readahead+0x211/0x250 16:10:36 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) readv(r4, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x3e000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2467.464145][ T6052] filemap_fault+0x106/0x9f0 [ 2467.464174][ T6052] ? balance_dirty_pages_ratelimited+0x241/0x2a0 [ 2467.464238][ T6052] ? cgroup_rstat_updated+0x34/0x100 [ 2467.464301][ T6052] ? mapping_seek_hole_data+0x7c0/0x7c0 [ 2467.464330][ T6052] handle_mm_fault+0xc81/0x1580 [ 2467.464349][ T6052] do_user_addr_fault+0x609/0xbe0 [ 2467.464366][ T6052] exc_page_fault+0x91/0x220 [ 2467.464385][ T6052] asm_exc_page_fault+0x1e/0x30 [ 2467.464411][ T6052] RIP: 0010:clear_user+0x60/0xa0 [ 2467.464433][ T6052] Code: 4c 89 f0 48 01 d8 72 53 4c 39 f8 77 4e e8 68 26 8c ff 0f 1f 00 89 d8 83 e0 07 48 c1 eb 03 48 89 d9 4c 89 f7 48 85 c9 74 10 90 <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 c1 85 c9 74 0a [ 2467.464489][ T6052] RSP: 0018:ffffc90005337bb8 EFLAGS: 00010202 [ 2467.464505][ T6052] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000070 [ 2467.464519][ T6052] RDX: ffffc9000f42d000 RSI: 0000000000002cbd RDI: 0000000020020000 [ 2467.464532][ T6052] RBP: ffffc90005337e58 R08: ffffffff819810e6 R09: 0001c90005337e57 [ 2467.464545][ T6052] R10: 0000000000000004 R11: ffff88814f5ff040 R12: 0000000020020380 [ 2467.464556][ T6052] R13: 0000000000001000 R14: 000000002001f380 R15: 00007ffffffff000 [ 2467.464567][ T6052] ? clear_user+0x36/0xa0 [ 2467.464585][ T6052] ? clear_user+0x48/0xa0 [ 2467.464603][ T6052] iov_iter_zero+0x11b/0xb20 [ 2467.464623][ T6052] ? should_fail+0xd6/0x250 [ 2467.464642][ T6052] read_iter_zero+0x63/0x180 [ 2467.464685][ T6052] do_iter_readv_writev+0x2fb/0x380 [ 2467.464730][ T6052] do_iter_read+0x192/0x5d0 [ 2467.464816][ T6052] ? import_iovec+0x69/0x80 [ 2467.464834][ T6052] do_readv+0x171/0x2c0 [ 2467.464858][ T6052] ? vfs_write+0x61a/0x900 [ 2467.464958][ T6052] __x64_sys_readv+0x41/0x50 [ 2467.464982][ T6052] do_syscall_64+0x44/0xa0 [ 2467.465006][ T6052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.465032][ T6052] RIP: 0033:0x7f4fc1ace709 [ 2467.465046][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.465063][ T6052] RSP: 002b:00007f4fbf846188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2467.465156][ T6052] RAX: ffffffffffffffda RBX: 00007f4fc1bd2f60 RCX: 00007f4fc1ace709 [ 2467.465172][ T6052] RDX: 0000000000000003 RSI: 0000000020000ac0 RDI: 0000000000000006 [ 2467.465185][ T6052] RBP: 00007f4fbf8461d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.465197][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2467.465208][ T6052] R13: 00007ffd456fa3ff R14: 00007f4fbf846300 R15: 0000000000022000 [ 2467.534740][ T6070] FAULT_INJECTION: forcing a failure. [ 2467.534740][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.534764][ T6070] CPU: 0 PID: 6070 Comm: syz-executor.0 Tainted: G W 5.15.0-rc2-syzkaller #0 [ 2467.534783][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.534793][ T6070] Call Trace: [ 2467.534800][ T6070] dump_stack_lvl+0xd6/0x122 [ 2467.534883][ T6070] dump_stack+0x11/0x1b [ 2467.534900][ T6070] should_fail+0x23c/0x250 [ 2467.534917][ T6070] __should_failslab+0x81/0x90 [ 2467.534938][ T6070] should_failslab+0x5/0x20 [ 2467.534976][ T6070] kmem_cache_alloc_node+0x61/0x2c0 [ 2467.534993][ T6070] ? __alloc_skb+0xed/0x420 [ 2467.535012][ T6070] __alloc_skb+0xed/0x420 [ 2467.535032][ T6070] xfrm_send_state_notify+0x31f/0xd70 [ 2467.535053][ T6070] ? _raw_spin_unlock_bh+0x33/0x40 [ 2467.535075][ T6070] ? tsan.module_ctor+0x10/0x10 [ 2467.535149][ T6070] km_state_notify+0x60/0xb0 [ 2467.535179][ T6070] xfrm_add_sa+0x1b12/0x1bd0 [ 2467.535203][ T6070] xfrm_user_rcv_msg+0x31c/0x440 [ 2467.535225][ T6070] ? __d_rehash+0x125/0x180 [ 2467.535251][ T6070] netlink_rcv_skb+0x14e/0x250 [ 2467.535269][ T6070] ? xfrm_netlink_rcv+0x60/0x60 [ 2467.535336][ T6070] xfrm_netlink_rcv+0x43/0x60 [ 2467.535359][ T6070] netlink_unicast+0x5ec/0x6b0 [ 2467.535379][ T6070] netlink_sendmsg+0x6ea/0x7d0 [ 2467.535433][ T6070] ? netlink_getsockopt+0x720/0x720 [ 2467.535453][ T6070] ____sys_sendmsg+0x39a/0x510 [ 2467.535478][ T6070] __sys_sendmsg+0x244/0x2c0 [ 2467.535503][ T6070] __x64_sys_sendmsg+0x42/0x50 [ 2467.535522][ T6070] do_syscall_64+0x44/0xa0 [ 2467.535586][ T6070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2467.535695][ T6070] RIP: 0033:0x7fec9c2c1709 [ 2467.535710][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.535728][ T6070] RSP: 002b:00007fec9a039188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2467.535747][ T6070] RAX: ffffffffffffffda RBX: 00007fec9c3c5f60 RCX: 00007fec9c2c1709 16:10:37 executing program 2: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x7c, 0x0) listxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)=""/204, 0xcc) 16:10:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x68, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xe0, 0x60, "9353c336d2f8969f5f69b4686f001e67e2b2cb158097629bbe385c62"}}]}, 0x158}}, 0x0) (fail_nth: 18) 16:10:37 executing program 1: r0 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x10001) syz_io_uring_setup(0x84, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10c}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f00006d4000/0x8000)=nil, &(0x7f0000000000), &(0x7f0000000240)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x