200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:34:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, 0x0, 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r1, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:38 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:34:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:34:38 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r1, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, 0x0, 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, 0x0, 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:34:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:34:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, 0x0, 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1092.504784] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:34:59 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, 0x0, 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:34:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:34:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1100.717434] perf: interrupt took too long (20832 > 20740), lowering kernel.perf_event_max_sample_rate to 9000 12:34:59 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, 0x0, 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:34:59 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240), 0x0, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:34:59 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:34:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1116.425306] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:35:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:22 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:22 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:22 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:35:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:22 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:35:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1137.279075] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:35:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:35:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:35:46 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:35:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:35:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:35:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1148.036151] cgroup: fork rejected by pids controller in /syz0 12:35:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1164.804226] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:36:12 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:12 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:36:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) 12:36:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:36:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) 12:36:13 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:13 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:36:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) 12:36:13 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1187.758749] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:36:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:36:35 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:35 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:35 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:36:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:36:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:36:35 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1214.060032] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:37:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:03 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 12:37:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 12:37:03 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1241.838298] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:37:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:28 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 12:37:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:28 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:28 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:29 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:29 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:29 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1263.657946] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:37:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:50 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:50 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:37:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:37:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:50 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:37:50 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1286.699831] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:38:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:38:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:38:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:13 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) 12:38:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:38:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:38:14 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) 12:38:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:38:14 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:14 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1295.580720] cgroup: fork rejected by pids controller in /syz1 [ 1309.345820] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:38:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) 12:38:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:38:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:38:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:38:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1332.167272] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:39:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:02 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:39:02 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:02 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:02 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1356.600707] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:39:31 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:31 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:39:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:39:31 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:31 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:31 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1387.027891] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:39:53 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:53 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:54 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:54 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:54 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:54 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:39:54 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:39:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) 12:39:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1408.978692] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:40:15 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:15 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) 12:40:15 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:15 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block={'block', 0x3d, 0xc00}}, {@gid}], [{@smackfshat={'smackfshat', 0x3d, '&'}}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}]}) 12:40:15 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:15 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1430.944606] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:40:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) 12:40:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:38 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:38 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:38 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:40:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:40:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1455.804956] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:41:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:04 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:04 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:04 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1478.262631] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:41:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:24 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:24 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, 0x0, 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:24 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:24 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:24 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:25 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:25 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, 0x0, 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfff, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block={'block', 0x3d, 0xc00}}, {@gid}], [{@smackfshat={'smackfshat', 0x3d, '&'}}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}]}) [ 1502.120088] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:41:48 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, 0x0, 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:48 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:48 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, 0x0, 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:48 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:41:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x0, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:41:49 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1523.191550] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:42:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:42:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:42:09 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:42:09 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:42:09 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:09 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:10 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:10 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:10 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:10 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1547.557032] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:42:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:42:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:42:37 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:37 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:37 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:42:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:42:37 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:42:38 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:38 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:42:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:42:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:42:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:42:38 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1573.966008] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:43:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:43:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:43:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:43:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1598.588008] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:43:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) 12:43:25 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:25 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:25 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r1}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:25 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1620.759091] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:43:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r1}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:51 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(0x0, 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(0x0, 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:43:51 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) syz_io_uring_setup(0x1523, &(0x7f0000000180)={0x0, 0x5b67, 0x10, 0x2, 0x34d}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r0, 0x0, &(0x7f00000003c0)="c661bf769c54808301846e3db4f3330c5bc5d0f3794cdd66a3192622dd5ae794bd31fbcd5e20f9ef8451aa095cb6dec169221dac21275d8d21bd7302a8af64ff644ebc547f4e53700aab243f9a575ae92bbaad14815c05b8bba38857226ba5f8e2432360ab9147f230cebfe2d09257d60fcf9bb5492aaa4491f9b2513c958cfd2ca6f848ee08b1fa899ea718f9e60195374cbc2a102b3746374a9a24e7cbbec3ffbb99ba569cb6439664d23246cba2e0030cf32251a87fdfa7560cba041606f392696e10472c2e8945e276d1db7947f9f64851", 0xd3, 0x0, 0x1}, 0xfff) write(r1, &(0x7f0000000380)="c84b7f7a7db26ebd990dea3f726841784237dcd40217458064a8fbb86f3c96fb019cc7822e10df6c8968f62e0dbc85a6042a7c2ed25d409d0baa7e7aeba2ab", 0x3f) 12:43:51 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x60100, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180), 0x8) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xfc, 0x9f, 0x6, 0x5, 0x0, 0x200, 0x204, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10400, 0x6, 0x97, 0x6, 0x40, 0x8, 0x7, 0x0, 0xce, 0x0, 0xf3}, r2, 0x10, r0, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x2) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40300, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x402640, 0x5) openat(r5, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000240)="2b76b5d45063d39526bf786af7c1f8", 0xf) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r6, &(0x7f00000000c0)=0x9a, 0x401) 12:43:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x60100, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000180), 0x8) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xfc, 0x9f, 0x6, 0x5, 0x0, 0x200, 0x204, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10400, 0x6, 0x97, 0x6, 0x40, 0x8, 0x7, 0x0, 0xce, 0x0, 0xf3}, r2, 0x10, r0, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x2) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40300, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x402640, 0x5) openat(r5, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r3, &(0x7f0000000240)="2b76b5d45063d39526bf786af7c1f8", 0xf) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r6, &(0x7f00000000c0)=0x9a, 0x401) 12:43:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r1}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1632.849155] loop4: detected capacity change from 0 to 256 [ 1632.869924] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 12:43:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:43:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(0x0, 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1632.933252] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1633.252061] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1633.252564] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1649.761442] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:44:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:44:15 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:44:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:44:15 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 12:44:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 12:44:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 12:44:15 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 1) 12:44:15 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1657.084261] FAULT_INJECTION: forcing a failure. [ 1657.084261] name failslab, interval 1, probability 0, space 0, times 1 [ 1657.084280] CPU: 1 PID: 24028 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1657.084293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1657.084300] Call Trace: [ 1657.084304] [ 1657.084309] dump_stack_lvl+0x8b/0xb3 [ 1657.084330] should_fail.cold+0x5/0xa [ 1657.084343] ? __do_sys_memfd_create+0xac/0x4e0 [ 1657.084365] should_failslab+0x5/0x10 [ 1657.084382] __kmalloc+0x72/0x440 [ 1657.084397] __do_sys_memfd_create+0xac/0x4e0 [ 1657.084417] do_syscall_64+0x3b/0x90 [ 1657.084432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1657.084449] RIP: 0033:0x7f8570012b19 [ 1657.084458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.084470] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1657.084483] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1657.084491] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1657.084498] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1657.084506] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1657.084513] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1657.084532] [ 1657.108856] FAULT_INJECTION: forcing a failure. [ 1657.108856] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1657.108889] CPU: 1 PID: 24029 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1657.108907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1657.108914] Call Trace: [ 1657.108917] [ 1657.108921] dump_stack_lvl+0x8b/0xb3 [ 1657.108935] should_fail.cold+0x5/0xa [ 1657.108965] _copy_from_user+0x2a/0x170 [ 1657.108980] copy_clone_args_from_user+0x147/0x780 [ 1657.109003] ? lock_is_held_type+0xd7/0x130 [ 1657.109021] ? sighand_ctor+0x40/0x40 [ 1657.109039] ? lock_release+0x3b2/0x750 [ 1657.109054] ? ksys_write+0x20c/0x250 [ 1657.109069] ? lock_downgrade+0x6d0/0x6d0 [ 1657.109086] ? lock_is_held_type+0xd7/0x130 [ 1657.109107] __do_sys_clone3+0x9d/0x2e0 [ 1657.109125] ? __ia32_sys_clone+0x150/0x150 [ 1657.109146] ? bit_wait_io_timeout+0x160/0x160 [ 1657.109163] ? lock_is_held_type+0xd7/0x130 [ 1657.109182] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1657.109202] ? vfs_write+0x422/0xac0 [ 1657.109220] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1657.109239] ? fput+0x2a/0x50 12:44:15 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1657.109258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.109280] do_syscall_64+0x3b/0x90 [ 1657.109293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1657.109309] RIP: 0033:0x7fadd0927b19 [ 1657.109317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.109327] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1657.109338] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 12:44:15 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:44:15 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 12:44:15 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 2) [ 1657.109345] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1657.109352] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.109359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.109365] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1657.109385] [ 1657.261561] FAULT_INJECTION: forcing a failure. [ 1657.261561] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.261579] CPU: 1 PID: 24399 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1657.261593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1657.261601] Call Trace: [ 1657.261604] [ 1657.261608] dump_stack_lvl+0x8b/0xb3 [ 1657.261628] should_fail.cold+0x5/0xa [ 1657.261641] ? create_object.isra.0+0x3a/0xa20 [ 1657.261662] should_failslab+0x5/0x10 [ 1657.261679] kmem_cache_alloc+0x5b/0x480 [ 1657.261694] create_object.isra.0+0x3a/0xa20 [ 1657.261714] ? kasan_unpoison+0x23/0x50 [ 1657.261733] __kmalloc+0x25b/0x440 [ 1657.261747] __do_sys_memfd_create+0xac/0x4e0 [ 1657.261767] do_syscall_64+0x3b/0x90 [ 1657.261782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1657.261799] RIP: 0033:0x7f8570012b19 [ 1657.261808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.261820] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1657.261832] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1657.261840] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1657.261847] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1657.261854] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1657.261861] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1657.261881] [ 1657.304335] FAULT_INJECTION: forcing a failure. [ 1657.304335] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.304366] CPU: 0 PID: 24423 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1657.304389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1657.304403] Call Trace: [ 1657.304409] [ 1657.304417] dump_stack_lvl+0x8b/0xb3 [ 1657.304449] should_fail.cold+0x5/0xa [ 1657.304471] ? copy_process+0x5c8/0x6da0 [ 1657.304506] should_failslab+0x5/0x10 [ 1657.304536] kmem_cache_alloc_node+0x55/0x490 [ 1657.304565] copy_process+0x5c8/0x6da0 [ 1657.304600] ? lock_is_held_type+0xd7/0x130 [ 1657.304632] ? find_held_lock+0x2c/0x110 [ 1657.304662] ? lock_release+0x3b2/0x750 [ 1657.304689] ? __might_fault+0xd1/0x170 [ 1657.304731] ? __cleanup_sighand+0xb0/0xb0 [ 1657.304776] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1657.304811] ? _copy_from_user+0xf2/0x170 [ 1657.304835] ? kernel_clone+0x2f8/0xa60 [ 1657.304871] kernel_clone+0xe7/0xa60 [ 1657.304903] ? lock_is_held_type+0xd7/0x130 [ 1657.304934] ? create_io_thread+0xf0/0xf0 [ 1657.305006] ? lock_is_held_type+0xd7/0x130 [ 1657.305045] __do_sys_clone3+0x1dd/0x2e0 [ 1657.305078] ? __ia32_sys_clone+0x150/0x150 [ 1657.305131] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1657.305165] ? vfs_write+0x422/0xac0 [ 1657.305193] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1657.305228] ? fput+0x2a/0x50 [ 1657.305263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.305304] do_syscall_64+0x3b/0x90 [ 1657.305329] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1657.305359] RIP: 0033:0x7fadd0927b19 [ 1657.305374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.305394] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1657.305415] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1657.305429] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1657.305441] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.305454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.305466] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1657.305503] [ 1670.914656] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:44:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:44:41 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 12:44:41 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:44:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:44:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:44:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:44:41 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 3) 12:44:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1682.368558] FAULT_INJECTION: forcing a failure. [ 1682.368558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.368577] CPU: 1 PID: 24453 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1682.368590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1682.368598] Call Trace: [ 1682.368602] [ 1682.368606] dump_stack_lvl+0x8b/0xb3 [ 1682.368626] should_fail.cold+0x5/0xa [ 1682.368641] _copy_from_user+0x2a/0x170 [ 1682.368656] __do_sys_memfd_create+0xff/0x4e0 [ 1682.368678] do_syscall_64+0x3b/0x90 [ 1682.368693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.368713] RIP: 0033:0x7f8570012b19 [ 1682.368722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.368733] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1682.368746] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1682.368754] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1682.368761] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1682.368768] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1682.368775] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1682.368795] [ 1682.412159] FAULT_INJECTION: forcing a failure. [ 1682.412159] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.412194] CPU: 0 PID: 24476 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1682.412219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1682.412234] Call Trace: [ 1682.412240] [ 1682.412248] dump_stack_lvl+0x8b/0xb3 [ 1682.412283] should_fail.cold+0x5/0xa [ 1682.412308] ? create_object.isra.0+0x3a/0xa20 [ 1682.412345] should_failslab+0x5/0x10 [ 1682.412376] kmem_cache_alloc+0x5b/0x480 [ 1682.412406] create_object.isra.0+0x3a/0xa20 [ 1682.412437] ? kasan_unpoison+0x23/0x50 [ 1682.412479] kmem_cache_alloc_node+0x248/0x490 12:44:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1682.412509] copy_process+0x5c8/0x6da0 [ 1682.412548] ? lock_is_held_type+0xd7/0x130 [ 1682.412583] ? find_held_lock+0x2c/0x110 [ 1682.412615] ? lock_release+0x3b2/0x750 [ 1682.412644] ? __might_fault+0xd1/0x170 [ 1682.412683] ? __cleanup_sighand+0xb0/0xb0 [ 1682.412731] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1682.412770] ? _copy_from_user+0xf2/0x170 [ 1682.412796] ? kernel_clone+0x2f8/0xa60 [ 1682.412834] kernel_clone+0xe7/0xa60 [ 1682.412869] ? lock_is_held_type+0xd7/0x130 12:44:41 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 4) [ 1682.412903] ? create_io_thread+0xf0/0xf0 [ 1682.412956] ? lock_is_held_type+0xd7/0x130 [ 1682.412998] __do_sys_clone3+0x1dd/0x2e0 [ 1682.413034] ? __ia32_sys_clone+0x150/0x150 [ 1682.413092] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1682.413129] ? vfs_write+0x422/0xac0 [ 1682.413158] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1682.413196] ? fput+0x2a/0x50 [ 1682.413233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.413277] do_syscall_64+0x3b/0x90 [ 1682.413304] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.413349] RIP: 0033:0x7fadd0927b19 [ 1682.413365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.413387] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1682.413410] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1682.413425] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1682.413438] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.413451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.413464] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1682.413504] 12:44:41 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:44:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:44:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1682.569863] FAULT_INJECTION: forcing a failure. [ 1682.569863] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.569899] CPU: 0 PID: 24838 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1682.569924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1682.569939] Call Trace: [ 1682.569945] [ 1682.569954] dump_stack_lvl+0x8b/0xb3 [ 1682.569988] should_fail.cold+0x5/0xa [ 1682.570018] should_failslab+0x5/0x10 [ 1682.570051] kmem_cache_alloc_lru+0x60/0x7c0 [ 1682.570073] ? shmem_alloc_inode+0x23/0x50 [ 1682.570100] ? lock_release+0x3b2/0x750 [ 1682.570140] shmem_alloc_inode+0x23/0x50 [ 1682.570167] ? shmem_destroy_inode+0x70/0x70 [ 1682.570194] alloc_inode+0x63/0x240 [ 1682.570229] new_inode+0x23/0x240 [ 1682.570267] shmem_get_inode+0x18b/0xcb0 [ 1682.570308] __shmem_file_setup+0xb8/0x310 [ 1682.570353] __do_sys_memfd_create+0x1c6/0x4e0 [ 1682.570396] do_syscall_64+0x3b/0x90 [ 1682.570425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.570458] RIP: 0033:0x7f8570012b19 [ 1682.570475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.570498] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 12:44:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1682.570521] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1682.570537] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1682.570551] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1682.570565] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1682.570579] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1682.570620] 12:44:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:44:41 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 5) [ 1682.775175] FAULT_INJECTION: forcing a failure. [ 1682.775175] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.775196] CPU: 1 PID: 24968 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1682.775208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1682.775216] Call Trace: [ 1682.775220] [ 1682.775224] dump_stack_lvl+0x8b/0xb3 [ 1682.775245] should_fail.cold+0x5/0xa [ 1682.775258] ? create_object.isra.0+0x3a/0xa20 [ 1682.775277] should_failslab+0x5/0x10 [ 1682.775293] kmem_cache_alloc+0x5b/0x480 [ 1682.775308] create_object.isra.0+0x3a/0xa20 [ 1682.775324] ? kasan_unpoison+0x23/0x50 [ 1682.775342] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1682.775352] ? shmem_alloc_inode+0x23/0x50 [ 1682.775371] shmem_alloc_inode+0x23/0x50 [ 1682.775383] ? shmem_destroy_inode+0x70/0x70 [ 1682.775396] alloc_inode+0x63/0x240 [ 1682.775414] new_inode+0x23/0x240 [ 1682.775432] shmem_get_inode+0x18b/0xcb0 [ 1682.775452] __shmem_file_setup+0xb8/0x310 [ 1682.775470] __do_sys_memfd_create+0x1c6/0x4e0 [ 1682.775490] do_syscall_64+0x3b/0x90 [ 1682.775505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1682.775521] RIP: 0033:0x7f8570012b19 [ 1682.775530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.775542] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1682.775555] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1682.775562] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1682.775569] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1682.775576] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1682.775583] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1682.775602] [ 1698.307793] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:45:05 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1706.748013] FAULT_INJECTION: forcing a failure. [ 1706.748013] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.748032] CPU: 0 PID: 25189 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1706.748045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1706.748054] Call Trace: [ 1706.748057] [ 1706.748061] dump_stack_lvl+0x8b/0xb3 [ 1706.748082] should_fail.cold+0x5/0xa [ 1706.748095] ? security_inode_alloc+0x34/0x160 [ 1706.748114] should_failslab+0x5/0x10 [ 1706.748131] kmem_cache_alloc+0x5b/0x480 [ 1706.748146] security_inode_alloc+0x34/0x160 [ 1706.748163] inode_init_always+0x5d8/0xd20 [ 1706.748183] alloc_inode+0x84/0x240 [ 1706.748200] new_inode+0x23/0x240 [ 1706.748218] shmem_get_inode+0x18b/0xcb0 [ 1706.748242] __shmem_file_setup+0xb8/0x310 [ 1706.748261] __do_sys_memfd_create+0x1c6/0x4e0 [ 1706.748282] do_syscall_64+0x3b/0x90 [ 1706.748298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.748315] RIP: 0033:0x7f8570012b19 [ 1706.748323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.748335] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1706.748346] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1706.748354] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1706.748361] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1706.748368] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1706.748375] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1706.748395] [ 1706.762569] FAULT_INJECTION: forcing a failure. [ 1706.762569] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1706.762618] CPU: 1 PID: 25186 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1706.762644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1706.762658] Call Trace: [ 1706.762664] [ 1706.762672] dump_stack_lvl+0x8b/0xb3 [ 1706.762712] should_fail.cold+0x5/0xa [ 1706.762739] prepare_alloc_pages+0x17b/0x500 [ 1706.762777] ? find_held_lock+0x2c/0x110 [ 1706.762808] __alloc_pages+0x131/0x4e0 [ 1706.762833] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1706.762876] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1706.762915] copy_process+0x65c/0x6da0 [ 1706.762951] ? lock_is_held_type+0xd7/0x130 [ 1706.762983] ? find_held_lock+0x2c/0x110 [ 1706.763012] ? lock_release+0x3b2/0x750 [ 1706.763039] ? __might_fault+0xd1/0x170 [ 1706.763076] ? __cleanup_sighand+0xb0/0xb0 [ 1706.763120] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1706.763156] ? _copy_from_user+0xf2/0x170 [ 1706.763179] ? kernel_clone+0x2f8/0xa60 [ 1706.763214] kernel_clone+0xe7/0xa60 [ 1706.763246] ? lock_is_held_type+0xd7/0x130 [ 1706.763277] ? create_io_thread+0xf0/0xf0 [ 1706.763327] ? lock_is_held_type+0xd7/0x130 [ 1706.763365] __do_sys_clone3+0x1dd/0x2e0 [ 1706.763398] ? __ia32_sys_clone+0x150/0x150 12:45:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/218, 0xda) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:45:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:05 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:45:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x800000, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000c00", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0000000100060011002d0000000800150000000100080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00ff0f0000060011000400000008001500ff7f0000"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 12:45:05 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 12:45:05 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 6) 12:45:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(0x0, 0x0) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:05 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 7) [ 1706.763451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1706.763485] ? vfs_write+0x422/0xac0 [ 1706.763513] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1706.763548] ? fput+0x2a/0x50 [ 1706.763583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1706.763624] do_syscall_64+0x3b/0x90 [ 1706.763649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.763678] RIP: 0033:0x7fadd0927b19 [ 1706.763694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.763714] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1706.763736] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1706.763750] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1706.763762] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.763774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.763786] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1706.763823] [ 1706.853804] FAULT_INJECTION: forcing a failure. [ 1706.853804] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.853824] CPU: 0 PID: 25200 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1706.853837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1706.853846] Call Trace: [ 1706.853849] [ 1706.853853] dump_stack_lvl+0x8b/0xb3 [ 1706.853874] should_fail.cold+0x5/0xa [ 1706.853887] ? create_object.isra.0+0x3a/0xa20 [ 1706.853908] should_failslab+0x5/0x10 [ 1706.853925] kmem_cache_alloc+0x5b/0x480 [ 1706.853941] create_object.isra.0+0x3a/0xa20 [ 1706.853957] ? kasan_unpoison+0x23/0x50 [ 1706.853976] kmem_cache_alloc+0x239/0x480 [ 1706.853990] security_inode_alloc+0x34/0x160 [ 1706.854012] inode_init_always+0x5d8/0xd20 [ 1706.854033] alloc_inode+0x84/0x240 [ 1706.854050] new_inode+0x23/0x240 [ 1706.854068] shmem_get_inode+0x18b/0xcb0 [ 1706.854089] __shmem_file_setup+0xb8/0x310 [ 1706.854108] __do_sys_memfd_create+0x1c6/0x4e0 [ 1706.854128] do_syscall_64+0x3b/0x90 [ 1706.854143] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.854160] RIP: 0033:0x7f8570012b19 [ 1706.854169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:45:05 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) [ 1706.854180] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1706.854192] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1706.854200] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1706.854207] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1706.854214] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1706.854221] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1706.854241] 12:45:05 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 8) 12:45:05 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1706.967317] FAULT_INJECTION: forcing a failure. [ 1706.967317] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.967336] CPU: 0 PID: 25385 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1706.967349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1706.967357] Call Trace: [ 1706.967361] [ 1706.967365] dump_stack_lvl+0x8b/0xb3 [ 1706.967387] should_fail.cold+0x5/0xa [ 1706.967399] ? prepare_creds+0x2b/0x6f0 [ 1706.967425] should_failslab+0x5/0x10 [ 1706.967442] kmem_cache_alloc+0x5b/0x480 [ 1706.967459] prepare_creds+0x2b/0x6f0 [ 1706.967479] copy_creds+0x76/0xb20 [ 1706.967501] copy_process+0xea0/0x6da0 [ 1706.967521] ? lock_is_held_type+0xd7/0x130 [ 1706.967539] ? find_held_lock+0x2c/0x110 [ 1706.967556] ? lock_release+0x3b2/0x750 [ 1706.967570] ? __might_fault+0xd1/0x170 [ 1706.967591] ? __cleanup_sighand+0xb0/0xb0 [ 1706.967614] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1706.967634] ? _copy_from_user+0xf2/0x170 [ 1706.967648] ? kernel_clone+0x2f8/0xa60 [ 1706.967667] kernel_clone+0xe7/0xa60 [ 1706.967685] ? lock_is_held_type+0xd7/0x130 [ 1706.967705] ? create_io_thread+0xf0/0xf0 [ 1706.967732] ? lock_is_held_type+0xd7/0x130 [ 1706.967753] __do_sys_clone3+0x1dd/0x2e0 [ 1706.967771] ? __ia32_sys_clone+0x150/0x150 [ 1706.967799] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1706.967818] ? vfs_write+0x422/0xac0 12:45:05 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1706.967834] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1706.967853] ? fput+0x2a/0x50 [ 1706.967872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1706.967893] do_syscall_64+0x3b/0x90 [ 1706.967907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.967924] RIP: 0033:0x7fadd0927b19 [ 1706.967933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.967944] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1706.967955] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1706.967963] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1706.967970] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.967976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.967983] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1706.968003] [ 1706.975852] FAULT_INJECTION: forcing a failure. [ 1706.975852] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.975867] CPU: 0 PID: 25400 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 12:45:05 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 9) [ 1706.975879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1706.975887] Call Trace: [ 1706.975889] [ 1706.975893] dump_stack_lvl+0x8b/0xb3 [ 1706.975908] should_fail.cold+0x5/0xa [ 1706.975922] should_failslab+0x5/0x10 [ 1706.975938] kmem_cache_alloc_lru+0x60/0x7c0 [ 1706.975948] ? __d_alloc+0x31/0x990 [ 1706.975961] ? lockdep_hardirqs_on+0x79/0x100 [ 1706.975981] __d_alloc+0x31/0x990 [ 1706.975994] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1706.976016] d_alloc_pseudo+0x19/0x70 [ 1706.976031] alloc_file_pseudo+0xce/0x250 [ 1706.976047] ? alloc_file+0x580/0x580 [ 1706.976061] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 12:45:05 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) [ 1706.976083] ? shmem_get_inode+0x619/0xcb0 [ 1706.976104] __shmem_file_setup+0x144/0x310 [ 1706.976124] __do_sys_memfd_create+0x1c6/0x4e0 [ 1706.976146] do_syscall_64+0x3b/0x90 [ 1706.976160] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1706.976176] RIP: 0033:0x7f8570012b19 [ 1706.976184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.976195] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1706.976206] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1706.976217] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1706.976224] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1706.976232] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1706.976239] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1706.976259] [ 1707.071967] FAULT_INJECTION: forcing a failure. [ 1707.071967] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.071984] CPU: 0 PID: 25564 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1707.071997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1707.072005] Call Trace: [ 1707.072008] [ 1707.072012] dump_stack_lvl+0x8b/0xb3 [ 1707.072029] should_fail.cold+0x5/0xa [ 1707.072044] ? create_object.isra.0+0x3a/0xa20 [ 1707.072063] should_failslab+0x5/0x10 [ 1707.072080] kmem_cache_alloc+0x5b/0x480 12:45:05 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) poll(&(0x7f0000000180)=[{r0, 0x8}, {r0, 0x4000}, {r1, 0xa102}], 0x3, 0x8) sendfile(r0, r1, &(0x7f0000000100)=0x4, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x81) [ 1707.072094] create_object.isra.0+0x3a/0xa20 [ 1707.072110] ? kasan_unpoison+0x23/0x50 [ 1707.072128] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1707.072138] ? __d_alloc+0x31/0x990 [ 1707.072155] __d_alloc+0x31/0x990 [ 1707.072167] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1707.072190] d_alloc_pseudo+0x19/0x70 [ 1707.072204] alloc_file_pseudo+0xce/0x250 [ 1707.072220] ? alloc_file+0x580/0x580 [ 1707.072233] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1707.072255] ? shmem_get_inode+0x619/0xcb0 [ 1707.072276] __shmem_file_setup+0x144/0x310 [ 1707.072295] __do_sys_memfd_create+0x1c6/0x4e0 [ 1707.072315] do_syscall_64+0x3b/0x90 [ 1707.072330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.072346] RIP: 0033:0x7f8570012b19 [ 1707.072355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:45:05 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 10) [ 1707.072366] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1707.072377] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1707.072384] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1707.072391] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1707.072398] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1707.072405] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1707.072425] [ 1707.169161] FAULT_INJECTION: forcing a failure. [ 1707.169161] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.169178] CPU: 0 PID: 25614 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1707.169190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1707.169198] Call Trace: [ 1707.169201] [ 1707.169204] dump_stack_lvl+0x8b/0xb3 [ 1707.169223] should_fail.cold+0x5/0xa [ 1707.169236] ? __alloc_file+0x21/0x230 [ 1707.169253] should_failslab+0x5/0x10 [ 1707.169270] kmem_cache_alloc+0x5b/0x480 [ 1707.169286] __alloc_file+0x21/0x230 [ 1707.169301] alloc_empty_file+0x6d/0x170 [ 1707.169318] alloc_file+0x59/0x580 [ 1707.169335] alloc_file_pseudo+0x16a/0x250 [ 1707.169351] ? alloc_file+0x580/0x580 [ 1707.169364] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1707.169387] ? shmem_get_inode+0x619/0xcb0 [ 1707.169408] __shmem_file_setup+0x144/0x310 [ 1707.169430] __do_sys_memfd_create+0x1c6/0x4e0 [ 1707.169451] do_syscall_64+0x3b/0x90 [ 1707.169466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.169483] RIP: 0033:0x7f8570012b19 [ 1707.169491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1707.169502] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1707.169514] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1707.169521] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1707.169528] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1707.169535] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1707.169542] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1707.169561] [ 1707.215217] FAULT_INJECTION: forcing a failure. [ 1707.215217] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.215250] CPU: 1 PID: 25619 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1707.215274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1707.215288] Call Trace: [ 1707.215299] [ 1707.215307] dump_stack_lvl+0x8b/0xb3 [ 1707.215340] should_fail.cold+0x5/0xa [ 1707.215363] ? create_object.isra.0+0x3a/0xa20 [ 1707.215398] should_failslab+0x5/0x10 [ 1707.215428] kmem_cache_alloc+0x5b/0x480 [ 1707.215457] create_object.isra.0+0x3a/0xa20 [ 1707.215486] ? kasan_unpoison+0x23/0x50 [ 1707.215520] kmem_cache_alloc+0x239/0x480 [ 1707.215547] prepare_creds+0x2b/0x6f0 [ 1707.215587] copy_creds+0x76/0xb20 [ 1707.215629] copy_process+0xea0/0x6da0 [ 1707.215664] ? lock_is_held_type+0xd7/0x130 [ 1707.215697] ? find_held_lock+0x2c/0x110 [ 1707.215730] ? lock_release+0x3b2/0x750 [ 1707.215757] ? __might_fault+0xd1/0x170 [ 1707.215794] ? __cleanup_sighand+0xb0/0xb0 [ 1707.215839] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1707.215875] ? _copy_from_user+0xf2/0x170 [ 1707.215899] ? kernel_clone+0x2f8/0xa60 [ 1707.215934] kernel_clone+0xe7/0xa60 [ 1707.215967] ? lock_is_held_type+0xd7/0x130 [ 1707.216000] ? create_io_thread+0xf0/0xf0 [ 1707.216049] ? lock_is_held_type+0xd7/0x130 [ 1707.216088] __do_sys_clone3+0x1dd/0x2e0 [ 1707.216121] ? __ia32_sys_clone+0x150/0x150 [ 1707.216176] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1707.216212] ? vfs_write+0x422/0xac0 [ 1707.216239] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1707.216275] ? fput+0x2a/0x50 [ 1707.216310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1707.216351] do_syscall_64+0x3b/0x90 [ 1707.216376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1707.216407] RIP: 0033:0x7fadd0927b19 [ 1707.216423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1707.216443] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1707.216465] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1707.216479] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1707.216492] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1707.216504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.216516] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1707.216553] [ 1725.842953] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:45:32 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 12:45:32 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1734.057548] FAULT_INJECTION: forcing a failure. [ 1734.057548] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.057596] CPU: 1 PID: 25727 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1734.057622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1734.057635] Call Trace: [ 1734.057641] [ 1734.057649] dump_stack_lvl+0x8b/0xb3 [ 1734.057680] should_fail.cold+0x5/0xa [ 1734.057709] ? security_prepare_creds+0x10a/0x180 [ 1734.057744] should_failslab+0x5/0x10 12:45:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x35}}}}, [@chandef_params]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4c081) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2001010, &(0x7f0000000300)={[{@uid={'uid', 0x3d, 0xee00}}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x34]}}], [{@euid_eq={'euid', 0x3d, r2}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee00}}]}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0xe880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8181, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:45:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(0x0, 0x0) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:45:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 11) 12:45:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001780)={{}, r2, 0x0, @inherit={0x68, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000040000000000000000000000000000000000000f0bd5a14e91fcde0bbdde525b8c000000000000000000000000000000ffff0040000000000000000900c6e4ff49999daff6ee000000000000c34e1893c63853400a502ba234de32b5f32a403049197679ae4bf27520a8bb00725646c000000000f507b326c20a81ad9cf984647fe40a686f037eed30767094ce522851bba5bd"]}, @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"16a161689c062300", r2, 0x0, {0x7f, 0x8000}, {0x6000, 0x3}, 0xffffffffffff8000, [0x400, 0x3, 0x3f, 0x6, 0x5, 0x85, 0xfffffffffffffff7, 0x8, 0x8000, 0x2, 0x3, 0x2, 0x382, 0xfffffffffffffffd, 0x1, 0x582]}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1734.057774] __kmalloc+0x72/0x440 [ 1734.057800] security_prepare_creds+0x10a/0x180 [ 1734.057836] prepare_creds+0x505/0x6f0 [ 1734.057875] copy_creds+0x76/0xb20 [ 1734.057917] copy_process+0xea0/0x6da0 [ 1734.057952] ? lock_is_held_type+0xd7/0x130 [ 1734.057985] ? find_held_lock+0x2c/0x110 [ 1734.058015] ? lock_release+0x3b2/0x750 [ 1734.058042] ? __might_fault+0xd1/0x170 [ 1734.058089] ? __cleanup_sighand+0xb0/0xb0 [ 1734.058133] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.058169] ? _copy_from_user+0xf2/0x170 [ 1734.058192] ? kernel_clone+0x2f8/0xa60 [ 1734.058228] kernel_clone+0xe7/0xa60 [ 1734.058260] ? lock_is_held_type+0xd7/0x130 [ 1734.058291] ? create_io_thread+0xf0/0xf0 [ 1734.058340] ? lock_is_held_type+0xd7/0x130 [ 1734.058378] __do_sys_clone3+0x1dd/0x2e0 [ 1734.058412] ? __ia32_sys_clone+0x150/0x150 [ 1734.058465] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.058499] ? vfs_write+0x422/0xac0 [ 1734.058527] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1734.058562] ? fput+0x2a/0x50 [ 1734.058597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.058638] do_syscall_64+0x3b/0x90 [ 1734.058663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1734.058693] RIP: 0033:0x7fadd0927b19 [ 1734.058709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.058729] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1734.058750] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1734.058764] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1734.058776] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.058789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.058801] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1734.058837] [ 1734.080268] FAULT_INJECTION: forcing a failure. [ 1734.080268] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.080297] CPU: 1 PID: 25736 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1734.080320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1734.080333] Call Trace: [ 1734.080338] [ 1734.080345] dump_stack_lvl+0x8b/0xb3 [ 1734.080375] should_fail.cold+0x5/0xa [ 1734.080398] ? create_object.isra.0+0x3a/0xa20 [ 1734.080432] should_failslab+0x5/0x10 [ 1734.080461] kmem_cache_alloc+0x5b/0x480 [ 1734.080489] create_object.isra.0+0x3a/0xa20 [ 1734.080517] ? kasan_unpoison+0x23/0x50 [ 1734.080551] kmem_cache_alloc+0x239/0x480 [ 1734.080577] __alloc_file+0x21/0x230 [ 1734.080606] alloc_empty_file+0x6d/0x170 [ 1734.080637] alloc_file+0x59/0x580 [ 1734.080669] alloc_file_pseudo+0x16a/0x250 [ 1734.080705] ? alloc_file+0x580/0x580 [ 1734.080729] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1734.080772] ? shmem_get_inode+0x619/0xcb0 [ 1734.080809] __shmem_file_setup+0x144/0x310 [ 1734.080844] __do_sys_memfd_create+0x1c6/0x4e0 [ 1734.080881] do_syscall_64+0x3b/0x90 [ 1734.080907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1734.080937] RIP: 0033:0x7f8570012b19 [ 1734.080952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:45:32 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1734.080972] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1734.080993] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 12:45:32 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 12:45:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 12) [ 1734.081006] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1734.081019] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1734.081032] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1734.081045] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 [ 1734.081081] [ 1734.262652] FAULT_INJECTION: forcing a failure. [ 1734.262652] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.262691] CPU: 1 PID: 25928 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1734.262714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1734.262728] Call Trace: [ 1734.262733] [ 1734.262741] dump_stack_lvl+0x8b/0xb3 [ 1734.262774] should_fail.cold+0x5/0xa [ 1734.262797] ? security_file_alloc+0x34/0x170 [ 1734.262830] should_failslab+0x5/0x10 [ 1734.262860] kmem_cache_alloc+0x5b/0x480 12:45:33 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1734.262887] security_file_alloc+0x34/0x170 [ 1734.262920] __alloc_file+0xb6/0x230 [ 1734.262949] alloc_empty_file+0x6d/0x170 [ 1734.262980] alloc_file+0x59/0x580 [ 1734.263012] alloc_file_pseudo+0x16a/0x250 [ 1734.263041] ? alloc_file+0x580/0x580 [ 1734.263065] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1734.263108] ? shmem_get_inode+0x619/0xcb0 [ 1734.263145] __shmem_file_setup+0x144/0x310 [ 1734.263180] __do_sys_memfd_create+0x1c6/0x4e0 [ 1734.263218] do_syscall_64+0x3b/0x90 [ 1734.263244] entry_SYSCALL_64_after_hwframe+0x44/0xae 12:45:33 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) [ 1734.263274] RIP: 0033:0x7f8570012b19 [ 1734.263290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.263310] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 12:45:33 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1734.263332] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1734.263345] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1734.263358] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1734.263371] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1734.263384] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 12:45:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1734.263420] [ 1734.273198] FAULT_INJECTION: forcing a failure. [ 1734.273198] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.273218] CPU: 0 PID: 25980 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1734.273231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1734.273239] Call Trace: [ 1734.273243] [ 1734.273248] dump_stack_lvl+0x8b/0xb3 [ 1734.273269] should_fail.cold+0x5/0xa [ 1734.273282] ? prepare_creds+0x2b/0x6f0 [ 1734.273304] should_failslab+0x5/0x10 [ 1734.273323] kmem_cache_alloc+0x5b/0x480 [ 1734.273339] prepare_creds+0x2b/0x6f0 [ 1734.273360] copy_creds+0x76/0xb20 [ 1734.273382] copy_process+0xea0/0x6da0 [ 1734.273402] ? lock_is_held_type+0xd7/0x130 [ 1734.273421] ? find_held_lock+0x2c/0x110 [ 1734.273438] ? lock_release+0x3b2/0x750 [ 1734.273453] ? __might_fault+0xd1/0x170 [ 1734.273473] ? __cleanup_sighand+0xb0/0xb0 [ 1734.273497] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.273518] ? _copy_from_user+0xf2/0x170 [ 1734.273532] ? kernel_clone+0x2f8/0xa60 [ 1734.273551] kernel_clone+0xe7/0xa60 [ 1734.273573] ? lock_is_held_type+0xd7/0x130 [ 1734.273590] ? create_io_thread+0xf0/0xf0 [ 1734.273617] ? lock_is_held_type+0xd7/0x130 [ 1734.273637] __do_sys_clone3+0x1dd/0x2e0 [ 1734.273655] ? __ia32_sys_clone+0x150/0x150 [ 1734.273684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.273703] ? vfs_write+0x422/0xac0 [ 1734.273719] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1734.273738] ? fput+0x2a/0x50 [ 1734.273757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.273779] do_syscall_64+0x3b/0x90 [ 1734.273793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1734.273813] RIP: 0033:0x7fadd0927b19 [ 1734.273823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.273836] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1734.273849] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1734.273857] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1734.273864] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.273870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.273877] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1734.273896] [ 1734.386068] FAULT_INJECTION: forcing a failure. [ 1734.386068] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.386098] CPU: 0 PID: 26137 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1734.386111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1734.386119] Call Trace: [ 1734.386122] [ 1734.386127] dump_stack_lvl+0x8b/0xb3 [ 1734.386147] should_fail.cold+0x5/0xa [ 1734.386159] ? create_object.isra.0+0x3a/0xa20 [ 1734.386179] should_failslab+0x5/0x10 [ 1734.386195] kmem_cache_alloc+0x5b/0x480 [ 1734.386210] create_object.isra.0+0x3a/0xa20 [ 1734.386225] ? kasan_unpoison+0x23/0x50 [ 1734.386243] kmem_cache_alloc+0x239/0x480 [ 1734.386258] prepare_creds+0x2b/0x6f0 [ 1734.386279] copy_creds+0x76/0xb20 [ 1734.386302] copy_process+0xea0/0x6da0 [ 1734.386321] ? lock_is_held_type+0xd7/0x130 [ 1734.386339] ? find_held_lock+0x2c/0x110 [ 1734.386356] ? lock_release+0x3b2/0x750 [ 1734.386371] ? __might_fault+0xd1/0x170 [ 1734.386391] ? __cleanup_sighand+0xb0/0xb0 [ 1734.386414] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.386434] ? _copy_from_user+0xf2/0x170 [ 1734.386448] ? kernel_clone+0x2f8/0xa60 [ 1734.386467] kernel_clone+0xe7/0xa60 [ 1734.386484] ? lock_is_held_type+0xd7/0x130 [ 1734.386505] ? create_io_thread+0xf0/0xf0 [ 1734.386531] ? lock_is_held_type+0xd7/0x130 [ 1734.386552] __do_sys_clone3+0x1dd/0x2e0 [ 1734.386570] ? __ia32_sys_clone+0x150/0x150 [ 1734.386598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.386616] ? vfs_write+0x422/0xac0 [ 1734.386631] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1734.386650] ? fput+0x2a/0x50 [ 1734.386669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.386691] do_syscall_64+0x3b/0x90 [ 1734.386704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1734.386721] RIP: 0033:0x7fadd0927b19 [ 1734.386729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.386740] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1734.386753] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1734.386760] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1734.386767] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.386774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.386780] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1734.386800] [ 1747.204544] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:45:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(0x0, 0x0) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:53 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:45:53 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 12:45:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "5c842c8abe0d3a729ca73bfe3861f019"}, 0x11, 0x1) sendfile(r1, r0, &(0x7f0000000100)=0x80, 0x8001) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:45:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0105279d7000fedbdf254400000082fe9d1a7a6deec058ab000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000005900000008000d00090000001400700004000500050008000500000004000700"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20044004) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x7, 0x5, 0x0, 0x0, 0x2, 0x8008, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffbff, r2, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3, 0x180) ioctl$TCXONC(r0, 0x540a, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_dev$vcsa(&(0x7f0000000340), 0x2b62, 0x80) r6 = inotify_init1(0x800) pidfd_getfd(r5, r6, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000040)=r7, 0x12) 12:45:53 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:45:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 13) [ 1755.021133] FAULT_INJECTION: forcing a failure. [ 1755.021133] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.021153] CPU: 0 PID: 26277 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.021166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.021174] Call Trace: [ 1755.021177] [ 1755.021182] dump_stack_lvl+0x8b/0xb3 [ 1755.021201] should_fail.cold+0x5/0xa [ 1755.021214] ? create_object.isra.0+0x3a/0xa20 [ 1755.021233] should_failslab+0x5/0x10 [ 1755.021249] kmem_cache_alloc+0x5b/0x480 [ 1755.021265] create_object.isra.0+0x3a/0xa20 [ 1755.021280] ? kasan_unpoison+0x23/0x50 [ 1755.021298] kmem_cache_alloc+0x239/0x480 [ 1755.021313] security_file_alloc+0x34/0x170 [ 1755.021332] __alloc_file+0xb6/0x230 [ 1755.021348] alloc_empty_file+0x6d/0x170 [ 1755.021364] alloc_file+0x59/0x580 [ 1755.021382] alloc_file_pseudo+0x16a/0x250 [ 1755.021397] ? alloc_file+0x580/0x580 [ 1755.021410] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1755.021434] ? shmem_get_inode+0x619/0xcb0 [ 1755.021454] __shmem_file_setup+0x144/0x310 [ 1755.021473] __do_sys_memfd_create+0x1c6/0x4e0 [ 1755.021493] do_syscall_64+0x3b/0x90 [ 1755.021507] entry_SYSCALL_64_after_hwframe+0x44/0xae 12:45:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 14) [ 1755.021524] RIP: 0033:0x7f8570012b19 [ 1755.021533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1755.021544] RSP: 002b:00007f856d587f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1755.021557] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f8570012b19 [ 1755.021564] RDX: 00007f856d588000 RSI: 0000000000000000 RDI: 00007f857006c0fb [ 1755.021571] RBP: 0000000000000000 R08: 00007f856d587ff8 R09: ffffffffffffffff [ 1755.021578] R10: 00007f856d587ffc R11: 0000000000000246 R12: 0000000020000040 [ 1755.021585] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200000c0 12:45:53 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1755.021604] [ 1755.053467] FAULT_INJECTION: forcing a failure. [ 1755.053467] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.053502] CPU: 0 PID: 26278 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.053515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.053522] Call Trace: [ 1755.053525] [ 1755.053529] dump_stack_lvl+0x8b/0xb3 [ 1755.053549] should_fail.cold+0x5/0xa [ 1755.053561] ? create_object.isra.0+0x3a/0xa20 [ 1755.053580] should_failslab+0x5/0x10 [ 1755.053596] kmem_cache_alloc+0x5b/0x480 [ 1755.053611] create_object.isra.0+0x3a/0xa20 [ 1755.053629] ? kasan_unpoison+0x23/0x50 [ 1755.053648] kmem_cache_alloc+0x239/0x480 [ 1755.053663] dup_fd+0x89/0xca0 [ 1755.053672] ? audit_filter_inodes+0x40/0x40 12:45:53 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1755.053691] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.053709] ? security_task_alloc+0xe6/0x260 [ 1755.053729] copy_process+0x2039/0x6da0 [ 1755.053749] ? lock_is_held_type+0xd7/0x130 [ 1755.053766] ? find_held_lock+0x2c/0x110 [ 1755.053791] ? __cleanup_sighand+0xb0/0xb0 [ 1755.053815] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.053834] ? _copy_from_user+0xf2/0x170 [ 1755.053847] ? kernel_clone+0x2f8/0xa60 [ 1755.053866] kernel_clone+0xe7/0xa60 [ 1755.053883] ? lock_is_held_type+0xd7/0x130 [ 1755.053900] ? create_io_thread+0xf0/0xf0 [ 1755.053927] ? lock_is_held_type+0xd7/0x130 [ 1755.053947] __do_sys_clone3+0x1dd/0x2e0 [ 1755.053965] ? __ia32_sys_clone+0x150/0x150 [ 1755.053994] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.054012] ? vfs_write+0x422/0xac0 [ 1755.054027] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1755.054046] ? fput+0x2a/0x50 [ 1755.054065] ? syscall_enter_from_user_mode+0x1d/0x50 12:45:53 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 15) [ 1755.054087] do_syscall_64+0x3b/0x90 [ 1755.054100] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.054116] RIP: 0033:0x7fadd0927b19 [ 1755.054125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:45:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x3f, 0x7f, 0x6, 0x0, 0x10001, 0x60, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x8120, 0x1, 0x200, 0x2, 0x2, 0x1, 0x6, 0x0, 0x3, 0x0, 0x1}, r2, 0x9, r3, 0x8) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1755.054136] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1755.054148] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1755.054156] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1755.054162] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.054169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.054175] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1755.054195] [ 1755.121940] FAULT_INJECTION: forcing a failure. [ 1755.121940] name failslab, interval 1, probability 0, space 0, times 0 12:45:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = timerfd_create(0x6, 0x80800) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000100)="116b5787b8aaf9ded05bdbc6121b6038fba0f69d00404b0b8dd9a7a9c4ce4042284b5918ce9ff3c171161a7fea1adf9d8ade2e2c02f89ca09edb552b4143c9163bdf94a049c460e1399516e98ad64c85e09323fd402b703e30ccfdb5d2cf2931d986ddf0a3f5a3f8fcaed4801dd933ecce87ec702f0717c8efffca6216e77cfed28688f49ba9896d9828b3f269c845abcfe1bc0919d2a988694d79129919bf837d4b2aeef77e8cf0dc36b0c2afff2dea3f219da3f558b6be4a98d525223a2950c1058022ad51cecc4557bb78777b898f410c5d9cd294919b980066d0d4b287fa2ade56de9c570259742fb9ee69b32374e5e76af97d", 0xf5}, {&(0x7f0000000200)="d954503eb086252c1b30dafe3359a0e6f43043d6bffbcb7b445ef9eae7db013128", 0x21}], 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONE(r1, 0x40049409, r3) r4 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x2, 0x1f, 0x3, 0x380, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1755.121965] CPU: 1 PID: 26353 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.121981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.121991] Call Trace: [ 1755.121995] [ 1755.122000] dump_stack_lvl+0x8b/0xb3 [ 1755.122024] should_fail.cold+0x5/0xa [ 1755.122040] ? getname_flags.part.0+0x50/0x4f0 [ 1755.122064] should_failslab+0x5/0x10 [ 1755.122085] kmem_cache_alloc+0x5b/0x480 [ 1755.122097] ? lock_downgrade+0x6d0/0x6d0 [ 1755.122125] getname_flags.part.0+0x50/0x4f0 [ 1755.122151] getname+0x8e/0xd0 [ 1755.122171] do_sys_openat2+0xf5/0x4c0 [ 1755.122188] ? build_open_flags+0x6f0/0x6f0 [ 1755.122200] ? find_held_lock+0x2c/0x110 [ 1755.122220] ? lock_release+0x3b2/0x750 [ 1755.122238] ? do_syscall_64+0x3b/0x90 [ 1755.122261] __x64_sys_openat+0x13f/0x1f0 [ 1755.122275] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1755.122296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1755.122324] do_syscall_64+0x3b/0x90 [ 1755.122341] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.122361] RIP: 0033:0x7f856ffc5a04 12:45:54 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 12:45:54 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1755.122372] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1755.122404] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1755.122420] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1755.122429] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1755.122438] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1755.122446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1755.122454] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1755.122479] [ 1755.274437] FAULT_INJECTION: forcing a failure. [ 1755.274437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1755.274462] CPU: 1 PID: 26641 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.274477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.274487] Call Trace: [ 1755.274491] [ 1755.274496] dump_stack_lvl+0x8b/0xb3 [ 1755.274519] should_fail.cold+0x5/0xa [ 1755.274538] prepare_alloc_pages+0x17b/0x500 [ 1755.274569] __alloc_pages+0x131/0x4e0 [ 1755.274586] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1755.274606] ? lock_is_held_type+0xd7/0x130 [ 1755.274633] ? lock_release+0x3b2/0x750 [ 1755.274652] ? __slab_alloc.constprop.0+0x45/0x80 [ 1755.274685] alloc_pages+0x1a0/0x2f0 [ 1755.274707] allocate_slab+0x22d/0x300 [ 1755.274732] ___slab_alloc+0xa09/0xe50 [ 1755.274757] ? getname_flags.part.0+0x50/0x4f0 [ 1755.274785] ? lock_is_held_type+0xd7/0x130 [ 1755.274807] ? getname_flags.part.0+0x50/0x4f0 [ 1755.274826] __slab_alloc.constprop.0+0x45/0x80 [ 1755.274851] ? getname_flags.part.0+0x50/0x4f0 [ 1755.274871] kmem_cache_alloc+0x393/0x480 [ 1755.274889] getname_flags.part.0+0x50/0x4f0 [ 1755.274914] getname+0x8e/0xd0 [ 1755.274933] do_sys_openat2+0xf5/0x4c0 [ 1755.274949] ? build_open_flags+0x6f0/0x6f0 [ 1755.274962] ? find_held_lock+0x2c/0x110 [ 1755.274981] ? lock_release+0x3b2/0x750 [ 1755.274998] ? do_syscall_64+0x3b/0x90 [ 1755.275020] __x64_sys_openat+0x13f/0x1f0 [ 1755.275034] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1755.275053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1755.275080] do_syscall_64+0x3b/0x90 [ 1755.275097] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.275117] RIP: 0033:0x7f856ffc5a04 [ 1755.275128] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1755.275141] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1755.275155] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1755.275164] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1755.275172] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1755.275181] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1755.275189] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1755.275213] [ 1755.402275] FAULT_INJECTION: forcing a failure. [ 1755.402275] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.402307] CPU: 0 PID: 26698 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.402330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.402344] Call Trace: [ 1755.402349] [ 1755.402357] dump_stack_lvl+0x8b/0xb3 [ 1755.402404] should_fail.cold+0x5/0xa [ 1755.402427] ? alloc_fdtable+0x84/0x280 [ 1755.402464] should_failslab+0x5/0x10 [ 1755.402493] kmem_cache_alloc_trace+0x55/0x3c0 [ 1755.402522] alloc_fdtable+0x84/0x280 [ 1755.402560] dup_fd+0x71e/0xca0 12:45:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1755.402594] copy_process+0x2039/0x6da0 [ 1755.402634] ? lock_is_held_type+0xd7/0x130 [ 1755.402666] ? find_held_lock+0x2c/0x110 [ 1755.402713] ? __cleanup_sighand+0xb0/0xb0 [ 1755.402763] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.402798] ? _copy_from_user+0xf2/0x170 [ 1755.402822] ? kernel_clone+0x2f8/0xa60 [ 1755.402858] kernel_clone+0xe7/0xa60 [ 1755.402890] ? lock_is_held_type+0xd7/0x130 [ 1755.402922] ? create_io_thread+0xf0/0xf0 [ 1755.402972] ? lock_is_held_type+0xd7/0x130 [ 1755.403010] __do_sys_clone3+0x1dd/0x2e0 [ 1755.403044] ? __ia32_sys_clone+0x150/0x150 [ 1755.403098] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.403132] ? vfs_write+0x422/0xac0 [ 1755.403159] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1755.403195] ? fput+0x2a/0x50 [ 1755.403231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1755.403272] do_syscall_64+0x3b/0x90 [ 1755.403296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.403327] RIP: 0033:0x7fadd0927b19 [ 1755.403342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1755.403362] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1755.403384] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1755.403398] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1755.403411] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.403423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.403435] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1755.403472] 12:45:54 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 16) 12:45:54 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140), 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1755.572216] FAULT_INJECTION: forcing a failure. [ 1755.572216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.572238] CPU: 1 PID: 26906 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.572252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.572260] Call Trace: [ 1755.572264] [ 1755.572269] dump_stack_lvl+0x8b/0xb3 [ 1755.572291] should_fail.cold+0x5/0xa [ 1755.572307] strncpy_from_user+0x34/0x3d0 [ 1755.572331] getname_flags.part.0+0x95/0x4f0 [ 1755.572356] getname+0x8e/0xd0 [ 1755.572373] do_sys_openat2+0xf5/0x4c0 [ 1755.572388] ? build_open_flags+0x6f0/0x6f0 [ 1755.572399] ? find_held_lock+0x2c/0x110 [ 1755.572418] ? lock_release+0x3b2/0x750 [ 1755.572434] ? do_syscall_64+0x3b/0x90 [ 1755.572455] __x64_sys_openat+0x13f/0x1f0 12:45:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(0x0, 0x0) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:45:54 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 12:45:54 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1755.572468] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1755.572486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1755.572511] do_syscall_64+0x3b/0x90 [ 1755.572525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.572544] RIP: 0033:0x7f856ffc5a04 [ 1755.572553] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1755.572565] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1755.572579] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1755.572588] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1755.572596] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1755.572603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1755.572610] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1755.572632] [ 1755.640467] FAULT_INJECTION: forcing a failure. [ 1755.640467] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.640501] CPU: 0 PID: 26930 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1755.640524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1755.640538] Call Trace: [ 1755.640544] [ 1755.640552] dump_stack_lvl+0x8b/0xb3 [ 1755.640585] should_fail.cold+0x5/0xa [ 1755.640608] ? create_object.isra.0+0x3a/0xa20 [ 1755.640643] should_failslab+0x5/0x10 [ 1755.640672] kmem_cache_alloc+0x5b/0x480 [ 1755.640707] create_object.isra.0+0x3a/0xa20 [ 1755.640736] ? kasan_unpoison+0x23/0x50 [ 1755.640769] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1755.640797] alloc_fdtable+0x84/0x280 [ 1755.640836] dup_fd+0x71e/0xca0 [ 1755.640870] copy_process+0x2039/0x6da0 [ 1755.640906] ? lock_is_held_type+0xd7/0x130 [ 1755.640938] ? find_held_lock+0x2c/0x110 [ 1755.640985] ? __cleanup_sighand+0xb0/0xb0 [ 1755.641029] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.641065] ? _copy_from_user+0xf2/0x170 [ 1755.641089] ? kernel_clone+0x2f8/0xa60 [ 1755.641124] kernel_clone+0xe7/0xa60 [ 1755.641157] ? lock_is_held_type+0xd7/0x130 [ 1755.641188] ? create_io_thread+0xf0/0xf0 [ 1755.641237] ? lock_is_held_type+0xd7/0x130 [ 1755.641276] __do_sys_clone3+0x1dd/0x2e0 [ 1755.641309] ? __ia32_sys_clone+0x150/0x150 [ 1755.641362] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.641396] ? vfs_write+0x422/0xac0 [ 1755.641424] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1755.641459] ? fput+0x2a/0x50 [ 1755.641494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1755.641535] do_syscall_64+0x3b/0x90 [ 1755.641560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1755.641590] RIP: 0033:0x7fadd0927b19 [ 1755.641606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1755.641627] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1755.641648] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1755.641662] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1755.641675] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.641687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.641699] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1755.641736] [ 1773.629600] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:46:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:46:20 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:46:20 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 12:46:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:46:20 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 17) 12:46:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pidfd_getfd(r0, r2, 0x0) ioctl$FITHAW(r2, 0xc0045878) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x200}}, './file0\x00'}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0xffff71e9, @mcast2, 0x2}, 0x1c) 12:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r2 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x5db5, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x5, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x7aef3479) openat(r1, &(0x7f0000000100)='./file0\x00', 0x6ca002, 0x28) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r8, &(0x7f0000000140)='./file0/../file0\x00', 0x88000, 0x20) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:46:20 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140), 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1782.129550] FAULT_INJECTION: forcing a failure. [ 1782.129550] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.129582] CPU: 1 PID: 27127 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1782.129605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1782.129618] Call Trace: [ 1782.129624] [ 1782.129632] dump_stack_lvl+0x8b/0xb3 [ 1782.129671] should_fail.cold+0x5/0xa [ 1782.129698] ? kvmalloc_node+0x41/0x1f0 [ 1782.129731] should_failslab+0x5/0x10 [ 1782.129760] __kmalloc_node+0x76/0x470 [ 1782.129804] kvmalloc_node+0x41/0x1f0 [ 1782.129838] alloc_fdtable+0xd3/0x280 [ 1782.129877] dup_fd+0x71e/0xca0 [ 1782.129912] copy_process+0x2039/0x6da0 [ 1782.129948] ? lock_is_held_type+0xd7/0x130 [ 1782.129980] ? find_held_lock+0x2c/0x110 [ 1782.130026] ? __cleanup_sighand+0xb0/0xb0 [ 1782.130071] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1782.130106] ? _copy_from_user+0xf2/0x170 [ 1782.130130] ? kernel_clone+0x2f8/0xa60 [ 1782.130166] kernel_clone+0xe7/0xa60 [ 1782.130197] ? lock_is_held_type+0xd7/0x130 [ 1782.130229] ? create_io_thread+0xf0/0xf0 [ 1782.130278] ? lock_is_held_type+0xd7/0x130 [ 1782.130316] __do_sys_clone3+0x1dd/0x2e0 [ 1782.130349] ? __ia32_sys_clone+0x150/0x150 [ 1782.130402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.130436] ? vfs_write+0x422/0xac0 [ 1782.130464] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1782.130499] ? fput+0x2a/0x50 [ 1782.130534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.130575] do_syscall_64+0x3b/0x90 [ 1782.130600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.130630] RIP: 0033:0x7fadd0927b19 [ 1782.130646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.130666] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 12:46:20 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 18) [ 1782.130686] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1782.130701] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1782.130713] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.130725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.130737] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1782.130785] [ 1782.146636] FAULT_INJECTION: forcing a failure. [ 1782.146636] name failslab, interval 1, probability 0, space 0, times 0 12:46:21 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) [ 1782.146656] CPU: 0 PID: 27130 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1782.146674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 12:46:21 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140), 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1782.146682] Call Trace: [ 1782.146686] [ 1782.146691] dump_stack_lvl+0x8b/0xb3 [ 1782.146712] should_fail.cold+0x5/0xa 12:46:21 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, 0x0, 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1782.146725] ? __alloc_file+0x21/0x230 [ 1782.146743] should_failslab+0x5/0x10 [ 1782.146759] kmem_cache_alloc+0x5b/0x480 [ 1782.146783] __alloc_file+0x21/0x230 [ 1782.146798] alloc_empty_file+0x6d/0x170 [ 1782.146815] path_openat+0xe1/0x2870 [ 1782.146840] ? path_lookupat+0x850/0x850 [ 1782.146856] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1782.146879] ? lock_is_held_type+0xd7/0x130 [ 1782.146901] do_filp_open+0x1aa/0x400 [ 1782.146918] ? may_open_dev+0xf0/0xf0 [ 1782.146935] ? lock_release+0x3b2/0x750 [ 1782.146950] ? alloc_fd+0x2f0/0x670 [ 1782.146968] ? lock_downgrade+0x6d0/0x6d0 [ 1782.146986] ? rwlock_bug.part.0+0x90/0x90 [ 1782.147003] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1782.147023] ? _find_next_bit+0x1e5/0x260 [ 1782.147045] ? _raw_spin_unlock+0x24/0x40 [ 1782.147059] ? alloc_fd+0x2f0/0x670 [ 1782.147085] do_sys_openat2+0x16d/0x4c0 [ 1782.147098] ? build_open_flags+0x6f0/0x6f0 [ 1782.147107] ? find_held_lock+0x2c/0x110 [ 1782.147123] ? lock_release+0x3b2/0x750 [ 1782.147137] ? do_syscall_64+0x3b/0x90 [ 1782.147155] __x64_sys_openat+0x13f/0x1f0 [ 1782.147167] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1782.147183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.147205] do_syscall_64+0x3b/0x90 [ 1782.147218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.147234] RIP: 0033:0x7f856ffc5a04 [ 1782.147243] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1782.147254] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1782.147267] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1782.147275] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1782.147281] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1782.147288] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1782.147295] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1782.147314] [ 1782.352635] FAULT_INJECTION: forcing a failure. [ 1782.352635] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.352656] CPU: 0 PID: 27541 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1782.352673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1782.352682] Call Trace: [ 1782.352685] [ 1782.352690] dump_stack_lvl+0x8b/0xb3 [ 1782.352714] should_fail.cold+0x5/0xa [ 1782.352726] ? create_object.isra.0+0x3a/0xa20 [ 1782.352745] should_failslab+0x5/0x10 [ 1782.352762] kmem_cache_alloc+0x5b/0x480 [ 1782.352778] create_object.isra.0+0x3a/0xa20 [ 1782.352793] ? kasan_unpoison+0x23/0x50 [ 1782.352811] kmem_cache_alloc+0x239/0x480 [ 1782.352826] __alloc_file+0x21/0x230 [ 1782.352841] alloc_empty_file+0x6d/0x170 [ 1782.352858] path_openat+0xe1/0x2870 [ 1782.352883] ? path_lookupat+0x850/0x850 [ 1782.352899] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1782.352921] ? lock_is_held_type+0xd7/0x130 [ 1782.352943] do_filp_open+0x1aa/0x400 [ 1782.352959] ? may_open_dev+0xf0/0xf0 [ 1782.352977] ? lock_release+0x3b2/0x750 [ 1782.352991] ? alloc_fd+0x2f0/0x670 [ 1782.353009] ? lock_downgrade+0x6d0/0x6d0 [ 1782.353027] ? rwlock_bug.part.0+0x90/0x90 [ 1782.353044] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1782.353063] ? _find_next_bit+0x1e5/0x260 [ 1782.353085] ? _raw_spin_unlock+0x24/0x40 [ 1782.353100] ? alloc_fd+0x2f0/0x670 [ 1782.353125] do_sys_openat2+0x16d/0x4c0 [ 1782.353138] ? build_open_flags+0x6f0/0x6f0 [ 1782.353148] ? find_held_lock+0x2c/0x110 [ 1782.353164] ? lock_release+0x3b2/0x750 [ 1782.353178] ? do_syscall_64+0x3b/0x90 [ 1782.353196] __x64_sys_openat+0x13f/0x1f0 [ 1782.353208] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1782.353224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.353246] do_syscall_64+0x3b/0x90 [ 1782.353259] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.353275] RIP: 0033:0x7f856ffc5a04 [ 1782.353284] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1782.353296] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1782.353308] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1782.353316] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1782.353323] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1782.353330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1782.353336] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1782.353355] [ 1782.356447] FAULT_INJECTION: forcing a failure. [ 1782.356447] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.356479] CPU: 1 PID: 27458 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1782.356503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1782.356518] Call Trace: [ 1782.356523] [ 1782.356531] dump_stack_lvl+0x8b/0xb3 [ 1782.356566] should_fail.cold+0x5/0xa [ 1782.356590] ? create_object.isra.0+0x3a/0xa20 [ 1782.356628] should_failslab+0x5/0x10 [ 1782.356658] kmem_cache_alloc+0x5b/0x480 [ 1782.356693] create_object.isra.0+0x3a/0xa20 [ 1782.356722] ? kasan_unpoison+0x23/0x50 [ 1782.356756] __kmalloc_node+0x26f/0x470 [ 1782.356800] kvmalloc_node+0x41/0x1f0 [ 1782.356836] alloc_fdtable+0xd3/0x280 [ 1782.356874] dup_fd+0x71e/0xca0 [ 1782.356909] copy_process+0x2039/0x6da0 [ 1782.356946] ? lock_is_held_type+0xd7/0x130 [ 1782.356980] ? find_held_lock+0x2c/0x110 [ 1782.357027] ? __cleanup_sighand+0xb0/0xb0 [ 1782.357071] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1782.357107] ? _copy_from_user+0xf2/0x170 [ 1782.357131] ? kernel_clone+0x2f8/0xa60 [ 1782.357167] kernel_clone+0xe7/0xa60 [ 1782.357199] ? lock_is_held_type+0xd7/0x130 [ 1782.357231] ? create_io_thread+0xf0/0xf0 [ 1782.357279] ? lock_is_held_type+0xd7/0x130 [ 1782.357318] __do_sys_clone3+0x1dd/0x2e0 [ 1782.357351] ? __ia32_sys_clone+0x150/0x150 [ 1782.357404] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1782.357438] ? vfs_write+0x422/0xac0 [ 1782.357466] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1782.357502] ? fput+0x2a/0x50 [ 1782.357537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.357578] do_syscall_64+0x3b/0x90 [ 1782.357604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1782.357635] RIP: 0033:0x7fadd0927b19 [ 1782.357650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.357670] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1782.357691] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1782.357705] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1782.357718] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.357731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1782.357743] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1782.357780] [ 1796.931201] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:46:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:46:46 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 12:46:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:46:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:46:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 19) 12:46:46 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140), 0x0, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:46:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x3, 0xfffffffd}) 12:46:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1807.711049] FAULT_INJECTION: forcing a failure. [ 1807.711049] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.711081] CPU: 0 PID: 27555 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1807.711104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1807.711118] Call Trace: [ 1807.711124] [ 1807.711131] dump_stack_lvl+0x8b/0xb3 [ 1807.711176] should_fail.cold+0x5/0xa [ 1807.711201] ? security_file_alloc+0x34/0x170 [ 1807.711235] should_failslab+0x5/0x10 [ 1807.711265] kmem_cache_alloc+0x5b/0x480 [ 1807.711297] security_file_alloc+0x34/0x170 [ 1807.711329] __alloc_file+0xb6/0x230 [ 1807.711359] alloc_empty_file+0x6d/0x170 [ 1807.711390] path_openat+0xe1/0x2870 [ 1807.711436] ? path_lookupat+0x850/0x850 [ 1807.711465] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1807.711506] ? lock_is_held_type+0xd7/0x130 [ 1807.711545] do_filp_open+0x1aa/0x400 [ 1807.711576] ? may_open_dev+0xf0/0xf0 [ 1807.711608] ? lock_release+0x3b2/0x750 [ 1807.711634] ? alloc_fd+0x2f0/0x670 [ 1807.711673] ? lock_downgrade+0x6d0/0x6d0 [ 1807.711706] ? rwlock_bug.part.0+0x90/0x90 [ 1807.711737] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1807.711776] ? _find_next_bit+0x1e5/0x260 [ 1807.711834] ? _raw_spin_unlock+0x24/0x40 [ 1807.711873] ? alloc_fd+0x2f0/0x670 [ 1807.711950] do_sys_openat2+0x16d/0x4c0 [ 1807.711991] ? build_open_flags+0x6f0/0x6f0 12:46:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1807.712021] ? find_held_lock+0x2c/0x110 [ 1807.712060] ? lock_release+0x3b2/0x750 [ 1807.712087] ? do_syscall_64+0x3b/0x90 [ 1807.712120] __x64_sys_openat+0x13f/0x1f0 [ 1807.712141] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1807.712172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.712213] do_syscall_64+0x3b/0x90 [ 1807.712239] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1807.712269] RIP: 0033:0x7f856ffc5a04 12:46:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r2 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x5db5, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x5, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x7aef3479) openat(r1, &(0x7f0000000100)='./file0\x00', 0x6ca002, 0x28) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r8, &(0x7f0000000140)='./file0/../file0\x00', 0x88000, 0x20) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1807.712285] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1807.712305] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1807.712327] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 12:46:46 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) [ 1807.712341] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1807.712354] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1807.712367] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1807.712379] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1807.712415] [ 1807.719138] FAULT_INJECTION: forcing a failure. [ 1807.719138] name failslab, interval 1, probability 0, space 0, times 0 12:46:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 20) [ 1807.719172] CPU: 1 PID: 27558 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1807.719190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1807.719200] Call Trace: [ 1807.719205] [ 1807.719211] dump_stack_lvl+0x8b/0xb3 [ 1807.719238] should_fail.cold+0x5/0xa [ 1807.719258] ? kvmalloc_node+0x41/0x1f0 [ 1807.719284] should_failslab+0x5/0x10 [ 1807.719306] __kmalloc_node+0x76/0x470 [ 1807.719339] kvmalloc_node+0x41/0x1f0 [ 1807.719364] alloc_fdtable+0x13f/0x280 [ 1807.719393] dup_fd+0x71e/0xca0 [ 1807.719419] copy_process+0x2039/0x6da0 [ 1807.719447] ? lock_is_held_type+0xd7/0x130 [ 1807.719471] ? find_held_lock+0x2c/0x110 [ 1807.719505] ? __cleanup_sighand+0xb0/0xb0 [ 1807.719538] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1807.719569] ? _copy_from_user+0xf2/0x170 [ 1807.719588] ? kernel_clone+0x2f8/0xa60 [ 1807.719615] kernel_clone+0xe7/0xa60 [ 1807.719638] ? lock_is_held_type+0xd7/0x130 [ 1807.719665] ? create_io_thread+0xf0/0xf0 [ 1807.719701] ? lock_is_held_type+0xd7/0x130 [ 1807.719729] __do_sys_clone3+0x1dd/0x2e0 [ 1807.719754] ? __ia32_sys_clone+0x150/0x150 [ 1807.719793] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1807.719818] ? vfs_write+0x422/0xac0 [ 1807.719839] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1807.719865] ? fput+0x2a/0x50 [ 1807.719891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.719921] do_syscall_64+0x3b/0x90 [ 1807.719940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1807.719963] RIP: 0033:0x7fadd0927b19 [ 1807.719975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.719990] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1807.720005] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1807.720016] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1807.720026] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1807.720035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.720044] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1807.720071] [ 1807.975588] FAULT_INJECTION: forcing a failure. [ 1807.975588] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.975622] CPU: 0 PID: 27952 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1807.975645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 12:46:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/102395, 0x18ffb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200280, &(0x7f00000000c0), 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) syncfs(r1) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/mipi-dsi', 0x200081, 0xcc) fcntl$getown(r2, 0x9) [ 1807.975663] Call Trace: [ 1807.975669] [ 1807.975676] dump_stack_lvl+0x8b/0xb3 [ 1807.975709] should_fail.cold+0x5/0xa [ 1807.975731] ? create_object.isra.0+0x3a/0xa20 [ 1807.975766] should_failslab+0x5/0x10 [ 1807.975794] kmem_cache_alloc+0x5b/0x480 [ 1807.975822] create_object.isra.0+0x3a/0xa20 [ 1807.975851] ? kasan_unpoison+0x23/0x50 12:46:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24084018}, 0x400c010) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1807.975884] __kmalloc_node+0x26f/0x470 [ 1807.975927] kvmalloc_node+0x41/0x1f0 [ 1807.975962] alloc_fdtable+0x13f/0x280 [ 1807.976000] dup_fd+0x71e/0xca0 [ 1807.976034] copy_process+0x2039/0x6da0 [ 1807.976070] ? lock_is_held_type+0xd7/0x130 [ 1807.976102] ? find_held_lock+0x2c/0x110 [ 1807.976148] ? __cleanup_sighand+0xb0/0xb0 [ 1807.976193] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1807.976228] ? _copy_from_user+0xf2/0x170 [ 1807.976252] ? kernel_clone+0x2f8/0xa60 [ 1807.976288] kernel_clone+0xe7/0xa60 [ 1807.976319] ? lock_is_held_type+0xd7/0x130 [ 1807.976351] ? create_io_thread+0xf0/0xf0 [ 1807.976400] ? lock_is_held_type+0xd7/0x130 [ 1807.976439] __do_sys_clone3+0x1dd/0x2e0 [ 1807.976472] ? __ia32_sys_clone+0x150/0x150 [ 1807.976526] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1807.976560] ? vfs_write+0x422/0xac0 12:46:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:46:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:46:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1807.976587] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1807.976622] ? fput+0x2a/0x50 [ 1807.976657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.976698] do_syscall_64+0x3b/0x90 [ 1807.976723] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1807.976753] RIP: 0033:0x7fadd0927b19 12:46:46 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 21) [ 1807.976769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.976789] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1807.976810] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1807.976824] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1807.976837] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1807.976849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1807.976861] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1807.976898] [ 1808.001984] FAULT_INJECTION: forcing a failure. [ 1808.001984] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.002017] CPU: 1 PID: 27970 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1808.002041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1808.002055] Call Trace: [ 1808.002061] [ 1808.002070] dump_stack_lvl+0x8b/0xb3 [ 1808.002107] should_fail.cold+0x5/0xa [ 1808.002131] ? create_object.isra.0+0x3a/0xa20 [ 1808.002169] should_failslab+0x5/0x10 [ 1808.002200] kmem_cache_alloc+0x5b/0x480 [ 1808.002230] create_object.isra.0+0x3a/0xa20 [ 1808.002259] ? kasan_unpoison+0x23/0x50 [ 1808.002293] kmem_cache_alloc+0x239/0x480 [ 1808.002321] security_file_alloc+0x34/0x170 [ 1808.002356] __alloc_file+0xb6/0x230 [ 1808.002387] alloc_empty_file+0x6d/0x170 [ 1808.002434] path_openat+0xe1/0x2870 [ 1808.002490] ? path_lookupat+0x850/0x850 [ 1808.002520] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1808.002562] ? lock_is_held_type+0xd7/0x130 [ 1808.002603] do_filp_open+0x1aa/0x400 [ 1808.002634] ? may_open_dev+0xf0/0xf0 [ 1808.002671] ? lock_release+0x3b2/0x750 [ 1808.002699] ? alloc_fd+0x2f0/0x670 [ 1808.002733] ? lock_downgrade+0x6d0/0x6d0 [ 1808.002766] ? rwlock_bug.part.0+0x90/0x90 [ 1808.002798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1808.002837] ? _find_next_bit+0x1e5/0x260 [ 1808.002878] ? _raw_spin_unlock+0x24/0x40 [ 1808.002906] ? alloc_fd+0x2f0/0x670 [ 1808.002954] do_sys_openat2+0x16d/0x4c0 [ 1808.002979] ? build_open_flags+0x6f0/0x6f0 [ 1808.002998] ? find_held_lock+0x2c/0x110 [ 1808.003027] ? lock_release+0x3b2/0x750 [ 1808.003054] ? do_syscall_64+0x3b/0x90 [ 1808.003087] __x64_sys_openat+0x13f/0x1f0 [ 1808.003109] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1808.003139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.003206] do_syscall_64+0x3b/0x90 [ 1808.003232] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1808.003262] RIP: 0033:0x7f856ffc5a04 [ 1808.003279] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1808.003300] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1808.003322] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1808.003336] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1808.003349] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1808.003362] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1808.003374] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1808.003425] [ 1808.249591] FAULT_INJECTION: forcing a failure. [ 1808.249591] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.249625] CPU: 1 PID: 28069 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1808.249649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1808.249668] Call Trace: [ 1808.249674] [ 1808.249682] dump_stack_lvl+0x8b/0xb3 [ 1808.249716] should_fail.cold+0x5/0xa [ 1808.249745] should_failslab+0x5/0x10 [ 1808.249776] kmem_cache_alloc_lru+0x60/0x7c0 [ 1808.249797] ? __d_alloc+0x31/0x990 [ 1808.249830] __d_alloc+0x31/0x990 [ 1808.249854] ? lock_is_held_type+0xd7/0x130 [ 1808.249891] d_alloc_parallel+0x10a/0x1c00 [ 1808.249922] ? __d_lookup+0x40a/0x780 [ 1808.249950] ? lock_downgrade+0x6d0/0x6d0 [ 1808.249981] ? find_held_lock+0x2c/0x110 [ 1808.250021] ? __d_lookup_rcu+0x730/0x730 [ 1808.250047] ? __d_lookup+0x42c/0x780 [ 1808.250080] ? d_lookup+0x115/0x120 [ 1808.250120] lookup_open.isra.0+0xb37/0x1680 [ 1808.250163] ? lookup_fast+0x6e0/0x6e0 [ 1808.250200] ? netlbl_cipsov4_list+0xcd0/0x1320 [ 1808.250247] ? netlbl_cipsov4_list+0xcd0/0x1320 [ 1808.250278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1808.250314] ? __mnt_want_write+0x1fa/0x2e0 [ 1808.250354] path_openat+0x99f/0x2870 [ 1808.250410] ? path_lookupat+0x850/0x850 [ 1808.250455] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1808.250499] ? lock_is_held_type+0xd7/0x130 [ 1808.250539] do_filp_open+0x1aa/0x400 [ 1808.250571] ? may_open_dev+0xf0/0xf0 [ 1808.250619] ? rwlock_bug.part.0+0x90/0x90 [ 1808.250651] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1808.250685] ? _find_next_bit+0x1e5/0x260 [ 1808.250725] ? _raw_spin_unlock+0x24/0x40 [ 1808.250752] ? alloc_fd+0x2f0/0x670 [ 1808.250802] do_sys_openat2+0x16d/0x4c0 [ 1808.250828] ? build_open_flags+0x6f0/0x6f0 [ 1808.250847] ? find_held_lock+0x2c/0x110 [ 1808.250877] ? lock_release+0x3b2/0x750 [ 1808.250904] ? do_syscall_64+0x3b/0x90 [ 1808.250939] __x64_sys_openat+0x13f/0x1f0 [ 1808.250961] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1808.250993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.251036] do_syscall_64+0x3b/0x90 [ 1808.251062] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1808.251091] RIP: 0033:0x7f856ffc5a04 [ 1808.251108] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1808.251129] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1808.251150] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1808.251175] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1808.251188] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1808.251201] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1808.251214] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1808.251253] [ 1825.642516] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:47:12 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 12:47:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:47:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(r0, &(0x7f0000000100)='./file0\x00', 0x40300, 0xe) 12:47:12 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:47:12 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 22) 12:47:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x9) r1 = signalfd(r0, &(0x7f0000000100)={[0x9]}, 0x8) openat(r1, &(0x7f0000000140)='./file0\x00', 0x400080, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:47:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r2 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x5db5, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x5, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x7aef3479) openat(r1, &(0x7f0000000100)='./file0\x00', 0x6ca002, 0x28) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r8, &(0x7f0000000140)='./file0/../file0\x00', 0x88000, 0x20) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:47:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1833.739938] FAULT_INJECTION: forcing a failure. [ 1833.739938] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.739958] CPU: 1 PID: 28401 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1833.739971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1833.739979] Call Trace: [ 1833.739983] [ 1833.739988] dump_stack_lvl+0x8b/0xb3 [ 1833.740009] should_fail.cold+0x5/0xa [ 1833.740023] ? create_object.isra.0+0x3a/0xa20 [ 1833.740044] should_failslab+0x5/0x10 [ 1833.740061] kmem_cache_alloc+0x5b/0x480 [ 1833.740077] create_object.isra.0+0x3a/0xa20 [ 1833.740093] ? kasan_unpoison+0x23/0x50 [ 1833.740112] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1833.740122] ? __d_alloc+0x31/0x990 [ 1833.740140] __d_alloc+0x31/0x990 [ 1833.740152] ? lock_is_held_type+0xd7/0x130 [ 1833.740173] d_alloc_parallel+0x10a/0x1c00 [ 1833.740190] ? __d_lookup+0x40a/0x780 [ 1833.740204] ? lock_downgrade+0x6d0/0x6d0 [ 1833.740221] ? find_held_lock+0x2c/0x110 [ 1833.740243] ? __d_lookup_rcu+0x730/0x730 [ 1833.740257] ? __d_lookup+0x42c/0x780 [ 1833.740275] ? d_lookup+0x115/0x120 [ 1833.740296] lookup_open.isra.0+0xb37/0x1680 [ 1833.740319] ? lookup_fast+0x6e0/0x6e0 [ 1833.740339] ? netlbl_cipsov4_list+0xcd0/0x1320 [ 1833.740365] ? netlbl_cipsov4_list+0xcd0/0x1320 12:47:12 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) (fail_nth: 23) [ 1833.740385] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1833.740405] ? __mnt_want_write+0x1fa/0x2e0 [ 1833.740427] path_openat+0x99f/0x2870 [ 1833.740453] ? path_lookupat+0x850/0x850 [ 1833.740469] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1833.740490] ? lock_is_held_type+0xd7/0x130 [ 1833.740512] do_filp_open+0x1aa/0x400 [ 1833.740528] ? may_open_dev+0xf0/0xf0 [ 1833.740554] ? rwlock_bug.part.0+0x90/0x90 12:47:12 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) [ 1833.740571] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1833.740590] ? _find_next_bit+0x1e5/0x260 [ 1833.740612] ? _raw_spin_unlock+0x24/0x40 [ 1833.740627] ? alloc_fd+0x2f0/0x670 [ 1833.740654] do_sys_openat2+0x16d/0x4c0 [ 1833.740668] ? build_open_flags+0x6f0/0x6f0 [ 1833.740678] ? find_held_lock+0x2c/0x110 [ 1833.740694] ? lock_release+0x3b2/0x750 [ 1833.740708] ? do_syscall_64+0x3b/0x90 [ 1833.740727] __x64_sys_openat+0x13f/0x1f0 [ 1833.740739] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1833.740756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1833.740779] do_syscall_64+0x3b/0x90 [ 1833.740793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1833.740809] RIP: 0033:0x7f856ffc5a04 [ 1833.740817] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1833.740828] RSP: 002b:00007f856d587ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1833.740840] RAX: ffffffffffffffda RBX: 00007f857005c970 RCX: 00007f856ffc5a04 [ 1833.740848] RDX: 0000000000000002 RSI: 00007f856d588000 RDI: 00000000ffffff9c [ 1833.740855] RBP: 00007f856d588000 R08: 0000000000000000 R09: ffffffffffffffff [ 1833.740862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1833.740868] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1833.740889] [ 1833.769180] FAULT_INJECTION: forcing a failure. [ 1833.769180] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.769202] CPU: 1 PID: 28404 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1833.769218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1833.769228] Call Trace: [ 1833.769232] [ 1833.769238] dump_stack_lvl+0x8b/0xb3 [ 1833.769259] should_fail.cold+0x5/0xa [ 1833.769271] ? copy_process+0x21a3/0x6da0 [ 1833.769296] should_failslab+0x5/0x10 [ 1833.769317] kmem_cache_alloc+0x5b/0x480 [ 1833.769337] copy_process+0x21a3/0x6da0 [ 1833.769363] ? lock_is_held_type+0xd7/0x130 [ 1833.769385] ? find_held_lock+0x2c/0x110 [ 1833.769418] ? __cleanup_sighand+0xb0/0xb0 [ 1833.769450] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1833.769475] ? _copy_from_user+0xf2/0x170 [ 1833.769492] ? kernel_clone+0x2f8/0xa60 [ 1833.769518] kernel_clone+0xe7/0xa60 [ 1833.769541] ? lock_is_held_type+0xd7/0x130 [ 1833.769564] ? create_io_thread+0xf0/0xf0 [ 1833.769600] ? lock_is_held_type+0xd7/0x130 [ 1833.769625] __do_sys_clone3+0x1dd/0x2e0 [ 1833.769654] ? __ia32_sys_clone+0x150/0x150 [ 1833.769693] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1833.769717] ? vfs_write+0x422/0xac0 [ 1833.769738] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1833.769764] ? fput+0x2a/0x50 [ 1833.769790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1833.769819] do_syscall_64+0x3b/0x90 [ 1833.769836] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1833.769854] RIP: 0033:0x7fadd0927b19 [ 1833.769864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1833.769875] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1833.769887] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1833.769894] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1833.769901] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.769908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.769915] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1833.769936] [ 1833.876077] FAULT_INJECTION: forcing a failure. [ 1833.876077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.876102] CPU: 1 PID: 28524 Comm: syz-executor.1 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1833.876120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1833.876130] Call Trace: [ 1833.876135] [ 1833.876140] dump_stack_lvl+0x8b/0xb3 [ 1833.876166] should_fail.cold+0x5/0xa [ 1833.876186] _copy_to_user+0x2a/0x140 [ 1833.876206] simple_read_from_buffer+0xcc/0x160 [ 1833.876229] proc_fail_nth_read+0x194/0x220 [ 1833.876258] ? proc_exe_link+0x1d0/0x1d0 [ 1833.876282] ? security_file_permission+0xb1/0xd0 [ 1833.876309] ? proc_exe_link+0x1d0/0x1d0 [ 1833.876333] vfs_read+0x1ea/0x5d0 [ 1833.876358] ksys_read+0x127/0x250 [ 1833.876378] ? __ia32_sys_pwrite64+0x220/0x220 [ 1833.876395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1833.876427] do_syscall_64+0x3b/0x90 [ 1833.876447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1833.876469] RIP: 0033:0x7f856ffc569c [ 1833.876480] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1833.876494] RSP: 002b:00007f856d588170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1833.876510] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f856ffc569c [ 1833.876520] RDX: 000000000000000f RSI: 00007f856d5881e0 RDI: 0000000000000003 [ 1833.876531] RBP: 00007f856d5881d0 R08: 0000000000000000 R09: ffffffffffffffff [ 1833.876540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.876550] R13: 00007ffc3bc4af3f R14: 00007f856d588300 R15: 0000000000022000 [ 1833.876577] [ 1833.895454] FAULT_INJECTION: forcing a failure. [ 1833.895454] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.895469] CPU: 1 PID: 28579 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1833.895482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1833.895489] Call Trace: [ 1833.895492] [ 1833.895496] dump_stack_lvl+0x8b/0xb3 [ 1833.895511] should_fail.cold+0x5/0xa [ 1833.895523] ? create_object.isra.0+0x3a/0xa20 [ 1833.895550] should_failslab+0x5/0x10 [ 1833.895568] kmem_cache_alloc+0x5b/0x480 [ 1833.895584] create_object.isra.0+0x3a/0xa20 [ 1833.895599] ? kasan_unpoison+0x23/0x50 [ 1833.895618] kmem_cache_alloc+0x239/0x480 [ 1833.895632] copy_process+0x21a3/0x6da0 [ 1833.895656] ? lock_is_held_type+0xd7/0x130 [ 1833.895672] ? find_held_lock+0x2c/0x110 [ 1833.895698] ? __cleanup_sighand+0xb0/0xb0 [ 1833.895722] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1833.895742] ? _copy_from_user+0xf2/0x170 [ 1833.895754] ? kernel_clone+0x2f8/0xa60 [ 1833.895774] kernel_clone+0xe7/0xa60 [ 1833.895791] ? lock_is_held_type+0xd7/0x130 [ 1833.895808] ? create_io_thread+0xf0/0xf0 [ 1833.895834] ? lock_is_held_type+0xd7/0x130 [ 1833.895855] __do_sys_clone3+0x1dd/0x2e0 [ 1833.895873] ? __ia32_sys_clone+0x150/0x150 [ 1833.895901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1833.895920] ? vfs_write+0x422/0xac0 [ 1833.895935] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1833.895954] ? fput+0x2a/0x50 [ 1833.895973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1833.895995] do_syscall_64+0x3b/0x90 [ 1833.896008] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1833.896024] RIP: 0033:0x7fadd0927b19 [ 1833.896032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1833.896042] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1833.896053] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1833.896061] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1833.896067] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.896074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.896080] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1833.896100] [ 1851.911564] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:47:38 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) 12:47:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r2 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x5db5, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x5, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x7aef3479) openat(r1, &(0x7f0000000100)='./file0\x00', 0x6ca002, 0x28) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r8, &(0x7f0000000140)='./file0/../file0\x00', 0x88000, 0x20) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:47:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:47:38 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 12:47:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:47:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_io_uring_setup(0x3f0, &(0x7f0000000100)={0x0, 0x9e5f, 0x20, 0x0, 0xe7}, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000cda000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$unix(r0, &(0x7f00000013c0), &(0x7f0000001440)=0x6e, 0x80800) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f0000001480)=[{r0, 0x859a}, {r1, 0x8000}, {r2, 0x200}, {r1}, {r3, 0x2008}, {r1, 0x200}, {r4, 0x2020}], 0x7, 0xfffffffe) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000300)={{r0}, "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"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffc1, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB="1400000002425f03"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200400b1) ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f00000014c0)="578753fa7858772193d9124d4bdb961d2fad1b624d00a159e718e76555ea68ce9cd7f828e3093e738284e3a8189b6dc618321d7f9cbc4e1917b4cf") clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:47:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x101000, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)='\x00', &(0x7f0000000100)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000180)='#.*\x00', &(0x7f00000001c0)='(\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000300)='][-\\%\x00', &(0x7f0000000340)='%\x00', &(0x7f0000000380)='{$\x00'], 0x1000) read(r0, &(0x7f0000000000), 0xfffffdef) setsockopt$inet_buf(r0, 0x0, 0x2b, &(0x7f0000000400)="0a4141c3476f3cbd28f6386d8625d2c94ce3f4fe692592ebed01ba2b88752b464e7e6bc6743e07571600a5f7f0b08dbcfe1d31c043298624d810e8b382bffeae426b7412b16407c5bd0dd1c02b7b080ee0d1ecf2f7206a4ab378ebead8c579307ce14606ac9bece6346eaa5ada47991d7b043d6849ce9bbd8d45e3e4b3937ac37a1cf725a4a8139ee722fc87e78e3c553e82d477b674a81a5208710d6f43d9a05de0de67ccef74ee31bb785990dba28b5a47788d0bed28f6be82dd499814af2a60a85dd09999a52390c4b247c54151fdcb04d895440dc92cd4c7e9deb0777ea80140fe7253c99929fea7a258a566c8dbd890895de49fcad507ced23d5529636326ddcea76f3a07844abafb58197f476d3d09cd7cac973d4f15ba02778679a7626001848b09d94439f8ad09b0b2aa5133f5ece6736fd139e4f28f686f027fb552d62ffed015753856267071a65f637c2a0f3f96b25b4e5051a46785c5eda82771bd6fcff65ac9ebeb6dca8720436c11a610828bdfbf9e255fd6839ca2e844493a5c76459dee5b579755164bfcee03e608ec5829a4845c9715f932bd2cf8c2f2c3269d29e0aca152b5184fbcc3eb56e5a7006ff85cfe1ba7909d749bbf721a5e103a6bb95fe02bc4934b948a38028df78f79d6b99deff6b1be3583cc268e43278696234326a1492458d35cdafc021318070b9392c0d77fb37d7ac2a1d980337b3265c41d14b93438f343e6e0a75ccd9017290307fc431793067be37144f4021826dd1f5d8d13712a3990b93ba479f939291c4a0f2ff13a3c2b945bdbe6886d4d9ade4935cd30a0667040f40b3584c0b16328f20f6f9f53148824deaed04f0b17866c5003de21980b7847dcd40ceac0727355b16d381cedb4d8ed28f50f956fb35f247c49001dc6f63c607c7a8c52750148578e3788c6747f2fa73ecacdbcedb12874606bda088b225522caf3e8a701d1d2951390200116ec062e03399488648762884676a4f8eb02dbfe48ce75060b37d91477d3022d7be952d92f783dcc7d5171ab70fc5d45029498e0310bb3b4cb9866096a9bfa9b4a637760446a493fdcb476e8eafb5eb04c6ee438f31c31b422bed67add512902e12bf676202f79bc0cf7f0c086d4a095e83a24ca2e2b37854600e42bb6b5a19add9dff017998ec1bf8a13a6a1abc62f88b643bd236b3804d5149252a68a7196dfb766d3e1231615fe824d841f6997faaa7d85e431f37c84f977954903accaf755fe820324a535b859222d274da3c77116126ac86f7d8a7b9e7a2a84c0af0b8d156aae8cbc9ec7d0c08c8d777555f4cfdffcaa69f18e529303818c1670b12c62958ddc6bca88fe191ce738e42640aebeaec025ad0b5247d019a0a97e4142536421e4bd95e9aebb6ba4f46944f5a15c15e85123e69242b6740b2863dc9d51580badc188ecb9d5d0376a68ebf04324b479ceeff7bc61c08559f2583b4e6e047fa7a57dc0c59d4b38e4c1233f941333d3254c775778a01593207b39b70c77924c49646a66fa79654ba7aadcd96086fdc57ebbf35715bdb769b003400adcefcdb94e1ac08dffd741033b4c983aeea487d604ea5eeb9541fba8e2ef0004ddc49f3dd963ead5342b4632bcb68be5674edc7df21a09978da6eeecd55bebc3f1d83092eb24e8cba0761dd6115078181f281d8205938c6ebddd7ff713ebe6cf0ca87c5fea01187ee854ee8343447bf84116ae9335e35d025a391b47aa20341c83faf9c26d89ec5f082c6c4b9ecb4f92f142d1542fc395aac56d9263d2cbb979e2286e2dc35ddb4ba7d33f1e755f2dbfb9e34b01d0cdd323b58bf860505477923d394534d5e88f42d7f00b191b926870cfa5c853fe67c32da542749b99a83eb487014366bad3d194ea6033e25b0582547e1c4d769c62bde86a1b24908851313d601a46978a14f3695b6c625b677b4abe998c95a8be0509041d21aa6c456739ffe8c3c717f42799b65da8499779a25e1c0d4b0e988c5d06277816dece971cb4cea0c2a8f62bdbe9f9af2735a0ac5f7f9265ad9e602b916895ff1bbe22bb25f2cacea9a9b451ccfa505fe0f385f596296ade764066fa67870ca0ebc1638cbad9c4fbedd1a5f934656036ff6ed390dc5d6b6a27c27ae87fe4b4be75b6e7ea18f5d453904e5e699a721257542573246f4930ff481d3e0db008454d2625d22206db34307b1fbd976e9a4efe3e8a018d478d5bb88dd7f3d3961e2c5e3a37db22bc4be6c212092c85e315591743fde0409e0173ba286d694f0c07b8272d26b7fd83796ef1cf6449246dfb9aa24ffb6bfaf14d217084dec0566a1cbfdb2bf1bc5dcfb6891c9dfc4d4e2bc5cea1586a9f2d7896ce031c96ec546b7f0266633b6a02a3596a93af87480ce6c40090dd62766973e625459e9817b21f230fb76690e5a3fc5a4c723356ec8aec2f587d301ee97f4350e17f467fbe9ea0a88f925b89d665059b072f6da419cad53ccb37f72e7e1a08a04103d86bd3bff2cbf30715ec342f8c904f339acaad9fd14b953adc5bc8385221050c711253e1e5f93fffd75b395f0b2e55d96b98073f263ee09a3bb96916adff1c5aef0e45a0f470e47809763431b1540156b250457dbff51658ba75d6a6625f3d39936638f01b8deab6b9b7d0abfa17f3ac285620c72a57af9b664b9c072b4333424cd145170781a1269ab05bb072838a5ac5c9a4a8e5bcf4bfe6350d5ec640863ee4f1faa511597b1115f404375c3d1ddf567341c035f06962aa55967f9507d786d12623babadf2e2bc57dead79aa1563f8c36223ca5888e6c19c1f860feaae3c917dc14e183f04c8a279c6440a93349a5465e63e638670627dbe2f388c321a8422e063076d10cb4d206b5b59aded74113acce87afa9fc6b1a4cb688939f1f05ecd1fae64f08774aa0e90f06fe2b2cffaea6257410ec465910e35d40df88760ccc29c2926eb632efcc5b9f3623f062fb0a2c84f78a1654a7e3e6ed17008f2cbe39192d38c55274b38c1f925fef9c46a2dd77f1dfc3723de53eec2cec4ff53b173bc95663e0cf6f94d5b1386da2d26f73ae61fa68a3b1468fdfb09c3d934dde3c0832b99d3ab7120b2ee7b167c9aaad0298381177ddca7a70cf0f06349248dff7463ccfc25dd7ee279699524319e8f3f996eb2a5a91a655717e273178dc24bc21eb0e5c9c9c595563aa6dd61fc82787c781c5552a40b7429194e4b6b9ece76746664c22b2cf553acd796345f5a6e23db557d97603273ad1ad92448d2f2980f41cdfbbc48096c2a9a3d1bb326a84edeb913943be85d27e50e47acfd27e5a5f0c9c362e64c414c96bd8a4aac9c2467a8f957a70439d77ab716ae6ead9b94ed44176c3660044fa46096bbdc01b0ca3a0de5058f3c6cd1a10f7bf9fd7e7cab210914313ffdbe3c5bca22dbc9a257bf76e5b1472c3d0858a1fb009c08f2a5f1b91feba62bcb7ab6d1495ce8945e4ddeef75f24fe6878375d3fcd7ab5a4ce67da18d7e6a60e6101836ba5312a76efb23eba3c8c1f9c6d86eca587899dd235697e6d2c46366830315223477c0c2e72f1eb6faf16e7a4a2f572494e0549ef6b24d608adc6ac73c00a3b9a2253b788e8ee1619f5469ce99df2e8cfcead77cef9b58aaeb9c4967e0d30cdf6690d63002f64b9dad733a905de01262f5115cd93a3a3692fd1b4a91558a009c2badb0c173413278d98b1d284824afc8bdf93b497ae42857822d1c370a0ca6e74505371aca064981615652391edafeee6b123a87458beabb2a6bb3253ea05c5815b98989eeed5f5df004ff94963ecc00c05c31119db04f46d6b273e45664f4bcd0f8c656fb55e5f7e9cf8e6f7b431b1b1bc89b5666cf55d0bb5884e2b913d99c1e3598a47f4bdf410cbb55ea7ee3483b150e41d47632fa769c1684565f04e565c3a5d3ad64fd83bddd0caa830d0d3f2a8a3273ca85c163fc9abb7499131edbc84446cfd0b4724cf831b45febdfbadc4a61ae162bdcd8b36e6114b735cabebdad6f75536ca1213ae7ea850afc0c8aed71377e724a4890b89760cc241f5a26a5a8b92fb7393b37bcaf0e7638a0e3f99575c644fcfb2d110fa9ed3ff0e054751a027594906fa8d4524c32d7aab4973d8054011e2980ecbd9f58c32e510f8128472989a82deeaeedd9c8753effee0d9bc742675c6686b1d3925027b467e6e0d88b63be4ba6deadc218f7402d59781e2ddeacd37e6773f28f422a0f5505ee73cae77cb1d7a59c07300962b6c0e8c04f8bb4e817173317212a6ce9553efa52a8ba3e135ef1d7e42c35a9e028e443c25fb8a6e06560adc65355b7a3a9843775fdc4de898773c6d11764b0d8eee9a1fc1d88f1d8a0efa01cb63114da769b1446fcf7f0979e7356852600c45636220e7e0e38881525085376c238070cac4dec8d0021ac22e9f8415a796646b388ce466f4fb14a39890dcdaeeb8897468b793e74a087b3379b01bd8b8a0e73affd560d89c0820216ed4c11800b007f3ee87c3f8b87a41ce6e4d84f2c76375b4dccfebfafef948b3c3be5826828e580d7e4bfcf55790e38f2f0171ed9c8e34c6cdb44dcb00a8fa1485df99420c2d6199a255d656484c41423b10a98317a3b11a380618e24c972b9528fec5fea28f1ec33ce69e62760ace3caa1a1a1210480885ded55d2919175bbff6f8f0275947c7c7f929bc99926537476d82bb7a91b384da07337f3b2b819dffa5122c92da06d356b3172cc5b10f625100e3994206795722095cc859329443306a6df48ccb72177606dbb796d83f39d4cbaf8b5b77446f6e51956d1f99b3f4c37545cc3c71bdd63e06efd685a8d2b7a8f8059dd82213881c9fbeb641d2e7dd214e6b12d9a633e7dd4c3b58cd7487d2f728b40b8b2a146e869c3f3784b1575155465572297bd2ecebb19f01e19d5953c446cf21ebda0e4948f4e1c60b34f0e83fe37ec134bebd88c39abcb253125259216dced693cf515224c72cf11fda204191542db8a84ef1994d4d2d1700f4d119b42fbbdda0dd701ba6172ce58f4c228ee4a27082852f597d0af11553bb3691cd9794a156daf38ac74bdadec14e7c704ff47f53f9faa395d625cf57926677da09691d2f6bfd15daad0ec2c19321be7c5de3d284150b54bd47ec85e901f2e4d685891f77dc4740261019f45b07dd82629d403ad68be080d2be99f6950cccfbd7ac8d3aa1b2edb2bccb651ca10fa85e27f041a7f217594b33512f764103260151f1570883c36539b2794b3f7d1339b10d193557adeb77beba95394b7af81786dc297fe4da6b29cfe03e157895f5f6ecb20cfc6513aa10a46372b1f088c90013b03461efff5779e5a5e878990b855e6b3283b7f62ed6d753c74530bc9b15b99a1bfebfded910800bb4a6660d2918060a4d84dd6277e2602f358d99f214123d102fa1bde6245e1f1354103acf4ee0546430a643673de3630865147991a125198acdb28b1528d711ae64a01e3be849defd936f3257e31e0e7c349de9e55134093c7ca8f80dfc9625536d3316c1d3121b0a40868c721f9f359f07fe1933b0f4aa42c9ba0ac2f6511da415bcb5cd65d0384e99d7419f57448cf486138e7c4966c0a7c089012531342dd2a2656a8c3eaa35ca44825bb50d009ee751288026f703fb68ead1d4e4d30962bc1e18e6ceb89a91cb8b9f9eb5b106dce7961e45054f2b9ed9946b04f202fbcc242c701260a6caabf7e0d172cd02c8fdbdcd7334b3f1d909d63e39ac7c01ba00fbb25de17fe42fc710eb61350551028c52f8a067f51f1ab56f5e11cbac9463cc6e787e727bb81f573e086f952cb7691ccc9c17baf78191f", 0x1000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:47:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1859.860096] FAULT_INJECTION: forcing a failure. [ 1859.860096] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.860116] CPU: 1 PID: 28829 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1859.860129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1859.860137] Call Trace: [ 1859.860140] [ 1859.860145] dump_stack_lvl+0x8b/0xb3 [ 1859.860166] should_fail.cold+0x5/0xa [ 1859.860178] ? copy_process+0x2322/0x6da0 12:47:38 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1859.860199] should_failslab+0x5/0x10 [ 1859.860222] kmem_cache_alloc+0x5b/0x480 [ 1859.860241] copy_process+0x2322/0x6da0 [ 1859.860266] ? lock_is_held_type+0xd7/0x130 [ 1859.860286] ? find_held_lock+0x2c/0x110 [ 1859.860311] ? __cleanup_sighand+0xb0/0xb0 [ 1859.860335] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1859.860355] ? _copy_from_user+0xf2/0x170 [ 1859.860369] ? kernel_clone+0x2f8/0xa60 [ 1859.860389] kernel_clone+0xe7/0xa60 [ 1859.860406] ? lock_is_held_type+0xd7/0x130 [ 1859.860424] ? create_io_thread+0xf0/0xf0 [ 1859.860450] ? lock_is_held_type+0xd7/0x130 [ 1859.860471] __do_sys_clone3+0x1dd/0x2e0 [ 1859.860489] ? __ia32_sys_clone+0x150/0x150 [ 1859.860517] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1859.860536] ? vfs_write+0x422/0xac0 [ 1859.860552] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1859.860571] ? fput+0x2a/0x50 [ 1859.860590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1859.860612] do_syscall_64+0x3b/0x90 [ 1859.860627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1859.860643] RIP: 0033:0x7fadd0927b19 [ 1859.860653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1859.860663] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1859.860675] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1859.860683] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1859.860690] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1859.860697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:47:38 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) [ 1859.860703] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1859.860723] 12:47:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:47:38 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1860.060474] FAULT_INJECTION: forcing a failure. [ 1860.060474] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.060506] CPU: 0 PID: 29205 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1860.060529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1860.060543] Call Trace: [ 1860.060548] [ 1860.060556] dump_stack_lvl+0x8b/0xb3 [ 1860.060588] should_fail.cold+0x5/0xa [ 1860.060611] ? copy_process+0x21a3/0x6da0 [ 1860.060653] should_failslab+0x5/0x10 [ 1860.060684] kmem_cache_alloc+0x5b/0x480 [ 1860.060712] copy_process+0x21a3/0x6da0 [ 1860.060746] ? lock_is_held_type+0xd7/0x130 [ 1860.060778] ? find_held_lock+0x2c/0x110 [ 1860.060824] ? __cleanup_sighand+0xb0/0xb0 [ 1860.060869] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1860.060904] ? _copy_from_user+0xf2/0x170 [ 1860.060928] ? kernel_clone+0x2f8/0xa60 [ 1860.060964] kernel_clone+0xe7/0xa60 [ 1860.060996] ? lock_is_held_type+0xd7/0x130 [ 1860.061027] ? create_io_thread+0xf0/0xf0 [ 1860.061076] ? lock_is_held_type+0xd7/0x130 [ 1860.061115] __do_sys_clone3+0x1dd/0x2e0 [ 1860.061148] ? __ia32_sys_clone+0x150/0x150 12:47:38 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1860.061201] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1860.061235] ? vfs_write+0x422/0xac0 [ 1860.061263] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1860.061299] ? fput+0x2a/0x50 [ 1860.061334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1860.061374] do_syscall_64+0x3b/0x90 [ 1860.061400] entry_SYSCALL_64_after_hwframe+0x44/0xae 12:47:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1860.061430] RIP: 0033:0x7fadd0927b19 [ 1860.061446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1860.061466] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1860.061487] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1860.061501] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 12:47:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:47:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:47:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x400, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x28}, {r2}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)={[0x2]}, 0x8) [ 1860.061514] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.061526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1860.061538] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1860.061574] 12:47:39 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:47:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), 0x0, &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:47:39 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) 12:47:39 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 12:47:39 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1860.333297] FAULT_INJECTION: forcing a failure. [ 1860.333297] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.333330] CPU: 0 PID: 29308 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1860.333354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1860.333368] Call Trace: [ 1860.333373] [ 1860.333381] dump_stack_lvl+0x8b/0xb3 [ 1860.333414] should_fail.cold+0x5/0xa [ 1860.333436] ? dup_mm+0x21/0x370 [ 1860.333470] should_failslab+0x5/0x10 [ 1860.333500] kmem_cache_alloc+0x5b/0x480 [ 1860.333528] dup_mm+0x21/0x370 [ 1860.333560] copy_process+0x697e/0x6da0 [ 1860.333594] ? lock_is_held_type+0xd7/0x130 [ 1860.333626] ? find_held_lock+0x2c/0x110 [ 1860.333677] ? __cleanup_sighand+0xb0/0xb0 [ 1860.333722] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1860.333757] ? _copy_from_user+0xf2/0x170 [ 1860.333781] ? kernel_clone+0x2f8/0xa60 12:47:39 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1860.333817] kernel_clone+0xe7/0xa60 [ 1860.333849] ? lock_is_held_type+0xd7/0x130 [ 1860.333881] ? create_io_thread+0xf0/0xf0 [ 1860.333930] ? lock_is_held_type+0xd7/0x130 [ 1860.333968] __do_sys_clone3+0x1dd/0x2e0 [ 1860.334002] ? __ia32_sys_clone+0x150/0x150 [ 1860.334055] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1860.334089] ? vfs_write+0x422/0xac0 [ 1860.334117] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1860.334152] ? fput+0x2a/0x50 [ 1860.334188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1860.334229] do_syscall_64+0x3b/0x90 [ 1860.334254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1860.334284] RIP: 0033:0x7fadd0927b19 [ 1860.334301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1860.334321] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 12:47:39 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) 12:47:39 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1860.334342] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 12:47:39 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) [ 1860.334356] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1860.334369] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.334382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1860.334394] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1860.334431] 12:47:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x24080, 0xc8) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:47:39 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:47:39 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1860.559292] FAULT_INJECTION: forcing a failure. [ 1860.559292] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.559311] CPU: 1 PID: 29669 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1860.559324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1860.559332] Call Trace: [ 1860.559336] [ 1860.559341] dump_stack_lvl+0x8b/0xb3 [ 1860.559362] should_fail.cold+0x5/0xa [ 1860.559378] ? create_object.isra.0+0x3a/0xa20 [ 1860.559405] should_failslab+0x5/0x10 [ 1860.559430] kmem_cache_alloc+0x5b/0x480 [ 1860.559450] create_object.isra.0+0x3a/0xa20 [ 1860.559471] ? kasan_unpoison+0x23/0x50 [ 1860.559494] kmem_cache_alloc+0x239/0x480 [ 1860.559510] dup_mm+0x21/0x370 [ 1860.559537] copy_process+0x697e/0x6da0 [ 1860.559574] ? lock_is_held_type+0xd7/0x130 [ 1860.559597] ? find_held_lock+0x2c/0x110 [ 1860.559626] ? __cleanup_sighand+0xb0/0xb0 [ 1860.559665] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1860.559691] ? _copy_from_user+0xf2/0x170 [ 1860.559707] ? kernel_clone+0x2f8/0xa60 [ 1860.559753] kernel_clone+0xe7/0xa60 [ 1860.559783] ? lock_is_held_type+0xd7/0x130 [ 1860.559805] ? create_io_thread+0xf0/0xf0 [ 1860.559844] ? lock_is_held_type+0xd7/0x130 [ 1860.559876] __do_sys_clone3+0x1dd/0x2e0 [ 1860.559922] ? __ia32_sys_clone+0x150/0x150 [ 1860.559971] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1860.559995] ? vfs_write+0x422/0xac0 [ 1860.560022] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1860.560056] ? fput+0x2a/0x50 [ 1860.560077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1860.560106] do_syscall_64+0x3b/0x90 [ 1860.560120] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1860.560145] RIP: 0033:0x7fadd0927b19 12:47:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r1, 0x400, 0x2) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1860.560160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1860.560178] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1860.560193] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1860.560201] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1860.560208] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.560215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1860.560221] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1860.560241] [ 1879.410392] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:48:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), 0x0, &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:48:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000080)='/proc/self/exe\x00', 0x1, 0x81) read(r1, &(0x7f0000000000), 0xfffffdef) openat(r1, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:48:09 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:48:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), 0x0, &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:48:09 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) 12:48:09 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 12:48:09 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:48:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="000000400000000000000000b4ad062920841fb36ee48dbdce84412c1ddda4bcb3e7e1fa506e5b19fd37e172c57e1df67a7e0901be186c606b38d26e8d943b10b2b8583c59d894552289803dce04efc3d857a31383388e52601eb629fd09d6cb5fb6e53d7defa2b5826ecf5d93bb0a6b73270b5f066df70eb23dabed901fc1f4e5e30ff092f26179dd33b4286641b118e7e4b1", @ANYRES32=r0, @ANYBLOB="4c010000ff7f00002e2f66696c653000"]) openat(r1, &(0x7f0000000040)='./file0\x00', 0x240200, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1890.788557] FAULT_INJECTION: forcing a failure. [ 1890.788557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1890.788578] CPU: 0 PID: 29903 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1890.788592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1890.788600] Call Trace: [ 1890.788604] [ 1890.788608] dump_stack_lvl+0x8b/0xb3 [ 1890.788634] should_fail.cold+0x5/0xa [ 1890.788650] prepare_alloc_pages+0x17b/0x500 [ 1890.788679] __alloc_pages+0x131/0x4e0 [ 1890.788693] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1890.788708] ? lock_is_held_type+0xd7/0x130 [ 1890.788739] alloc_pages+0x1a0/0x2f0 [ 1890.788758] __get_free_pages+0xc/0xa0 [ 1890.788777] pgd_alloc+0x84/0x4c0 [ 1890.788795] ? lock_downgrade+0x6d0/0x6d0 [ 1890.788812] ? pgd_page_get_mm+0x40/0x40 [ 1890.788829] ? lockdep_init_map_type+0x21a/0x7e0 [ 1890.788846] ? lockdep_init_map_type+0x21a/0x7e0 [ 1890.788869] mm_init+0x5f2/0xa90 [ 1890.788888] dup_mm+0x78/0x370 [ 1890.788907] copy_process+0x697e/0x6da0 [ 1890.788929] ? find_held_lock+0x2c/0x110 [ 1890.788954] ? __cleanup_sighand+0xb0/0xb0 [ 1890.788978] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1890.788999] ? _copy_from_user+0xf2/0x170 [ 1890.789013] ? kernel_clone+0x2f8/0xa60 [ 1890.789033] kernel_clone+0xe7/0xa60 [ 1890.789053] ? create_io_thread+0xf0/0xf0 [ 1890.789077] ? clockevents_program_event+0x147/0x350 [ 1890.789092] ? lock_downgrade+0x6d0/0x6d0 [ 1890.789107] ? lock_is_held_type+0xd7/0x130 12:48:09 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1890.789127] __do_sys_clone3+0x1dd/0x2e0 [ 1890.789145] ? __ia32_sys_clone+0x150/0x150 [ 1890.789175] ? tick_program_event+0xb4/0x140 [ 1890.789191] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1890.789209] ? hrtimer_interrupt+0x5b0/0x770 [ 1890.789237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1890.789260] do_syscall_64+0x3b/0x90 [ 1890.789274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1890.789291] RIP: 0033:0x7fadd0927b19 [ 1890.789301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1890.789312] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1890.789325] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1890.789333] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1890.789340] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.789347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1890.789354] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1890.789374] 12:48:09 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 12:48:09 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:48:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000300)={{0x0, 0x8000, 0x7ff, 0x101, 0x0, 0x2, 0x8, 0x1, 0x3ff, 0x1f, 0x9, 0x191aa6bd, 0x1, 0x9, 0x7}}) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x880, 0xa1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0xab, 0x0, 0x81, 0x1, 0x1}, 0x1830f461) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x0, 0x0, 0x2a, 0x0, "7b0e42f35b3433aed16d12f6d43022bf010ee31d072cfc3fc707e0a5f956062c2851aa711532d66b98ac4079a050aa9037ef9233256944826b4b8968ca76e901e6e06de9345c19994dd1b309437719c3"}, 0xd8) 12:48:09 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:48:09 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x18, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1891.022280] FAULT_INJECTION: forcing a failure. [ 1891.022280] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.022300] CPU: 0 PID: 30315 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1891.022313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1891.022321] Call Trace: [ 1891.022324] [ 1891.022329] dump_stack_lvl+0x8b/0xb3 [ 1891.022351] should_fail.cold+0x5/0xa [ 1891.022364] ? mas_alloc_nodes+0x36e/0x6a0 [ 1891.022385] should_failslab+0x5/0x10 [ 1891.022402] kmem_cache_alloc+0x5b/0x480 [ 1891.022419] mas_alloc_nodes+0x36e/0x6a0 [ 1891.022442] mas_node_count+0x101/0x130 [ 1891.022458] mas_expected_entries+0x10c/0x1b0 [ 1891.022479] dup_mmap+0x433/0xf80 [ 1891.022498] ? lock_downgrade+0x6d0/0x6d0 [ 1891.022514] ? do_raw_spin_lock+0x121/0x260 [ 1891.022535] ? replace_mm_exe_file+0x4c0/0x4c0 [ 1891.022554] ? do_raw_spin_unlock+0x4f/0x210 [ 1891.022577] ? lockdep_init_map_type+0x21a/0x7e0 [ 1891.022601] ? __init_rwsem+0x129/0x1a0 [ 1891.022619] dup_mm+0x91/0x370 [ 1891.022640] copy_process+0x697e/0x6da0 [ 1891.022659] ? lock_is_held_type+0xd7/0x130 [ 1891.022677] ? find_held_lock+0x2c/0x110 [ 1891.022704] ? __cleanup_sighand+0xb0/0xb0 [ 1891.022729] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1891.022749] ? _copy_from_user+0xf2/0x170 [ 1891.022763] ? kernel_clone+0x2f8/0xa60 [ 1891.022783] kernel_clone+0xe7/0xa60 [ 1891.022801] ? lock_is_held_type+0xd7/0x130 [ 1891.022818] ? create_io_thread+0xf0/0xf0 [ 1891.022846] ? lock_is_held_type+0xd7/0x130 [ 1891.022868] __do_sys_clone3+0x1dd/0x2e0 [ 1891.022886] ? __ia32_sys_clone+0x150/0x150 [ 1891.022918] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1891.022936] ? vfs_write+0x422/0xac0 [ 1891.022952] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1891.022971] ? fput+0x2a/0x50 [ 1891.022992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1891.023015] do_syscall_64+0x3b/0x90 [ 1891.023029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1891.023046] RIP: 0033:0x7fadd0927b19 [ 1891.023055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1891.023066] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1891.023078] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1891.023086] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1891.023093] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1891.023099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1891.023106] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1891.023129] [ 1908.423170] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:48:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000140)=0x3) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:48:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), 0x0, &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:48:36 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:48:36 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 12:48:36 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:48:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), 0x0, &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:48:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x5) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:48:36 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x63, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1918.094428] FAULT_INJECTION: forcing a failure. [ 1918.094428] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.094463] CPU: 0 PID: 30438 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1918.094487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1918.094502] Call Trace: [ 1918.094507] [ 1918.094516] dump_stack_lvl+0x8b/0xb3 [ 1918.094550] should_fail.cold+0x5/0xa [ 1918.094570] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1918.094604] ? create_object.isra.0+0x3a/0xa20 [ 1918.094646] should_failslab+0x5/0x10 [ 1918.094677] kmem_cache_alloc+0x5b/0x480 [ 1918.094709] create_object.isra.0+0x3a/0xa20 [ 1918.094739] ? kasan_unpoison+0x23/0x50 [ 1918.094776] kmem_cache_alloc+0x239/0x480 [ 1918.094806] mas_alloc_nodes+0x36e/0x6a0 [ 1918.094853] mas_node_count+0x101/0x130 [ 1918.094886] mas_expected_entries+0x10c/0x1b0 [ 1918.094926] dup_mmap+0x433/0xf80 [ 1918.094961] ? lock_downgrade+0x6d0/0x6d0 [ 1918.094993] ? do_raw_spin_lock+0x121/0x260 [ 1918.095034] ? replace_mm_exe_file+0x4c0/0x4c0 [ 1918.095070] ? do_raw_spin_unlock+0x4f/0x210 [ 1918.095116] ? lockdep_init_map_type+0x21a/0x7e0 [ 1918.095163] ? __init_rwsem+0x129/0x1a0 [ 1918.095197] dup_mm+0x91/0x370 [ 1918.095231] copy_process+0x697e/0x6da0 [ 1918.095268] ? lock_is_held_type+0xd7/0x130 [ 1918.095302] ? find_held_lock+0x2c/0x110 [ 1918.095359] ? __cleanup_sighand+0xb0/0xb0 [ 1918.095423] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1918.095461] ? _copy_from_user+0xf2/0x170 [ 1918.095486] ? kernel_clone+0x2f8/0xa60 [ 1918.095525] kernel_clone+0xe7/0xa60 [ 1918.095560] ? lock_is_held_type+0xd7/0x130 [ 1918.095594] ? create_io_thread+0xf0/0xf0 [ 1918.095650] ? lock_is_held_type+0xd7/0x130 [ 1918.095693] __do_sys_clone3+0x1dd/0x2e0 [ 1918.095729] ? __ia32_sys_clone+0x150/0x150 [ 1918.095790] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1918.095826] ? vfs_write+0x422/0xac0 [ 1918.095856] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1918.095894] ? fput+0x2a/0x50 [ 1918.095934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1918.095979] do_syscall_64+0x3b/0x90 [ 1918.096006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1918.096038] RIP: 0033:0x7fadd0927b19 [ 1918.096054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1918.096076] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1918.096098] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1918.096113] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1918.096126] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1918.096139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.096152] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1918.096196] 12:48:36 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xf0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) 12:48:37 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1933.681473] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 12:49:02 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) 12:49:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), 0x0, &(0x7f00000001c0), {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:49:02 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfe, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) 12:49:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockname(r0, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x80) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x8) 12:49:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xa2a}}, './file2\x00'}) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), 0x0, {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) 12:49:02 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 12:49:02 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1943.533811] FAULT_INJECTION: forcing a failure. [ 1943.533811] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.533832] CPU: 0 PID: 30864 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1943.533845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1943.533853] Call Trace: [ 1943.533857] [ 1943.533862] dump_stack_lvl+0x8b/0xb3 [ 1943.533883] should_fail.cold+0x5/0xa [ 1943.533899] should_failslab+0x5/0x10 [ 1943.533917] kmem_cache_alloc_bulk+0x47/0x780 12:49:02 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) [ 1943.533937] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1943.533954] ? kmem_cache_alloc+0x332/0x480 [ 1943.533970] mas_alloc_nodes+0x2a6/0x6a0 [ 1943.533995] mas_node_count+0x101/0x130 [ 1943.534011] mas_expected_entries+0x10c/0x1b0 [ 1943.534032] dup_mmap+0x433/0xf80 [ 1943.534050] ? lock_downgrade+0x6d0/0x6d0 [ 1943.534067] ? do_raw_spin_lock+0x121/0x260 [ 1943.534088] ? replace_mm_exe_file+0x4c0/0x4c0 [ 1943.534106] ? do_raw_spin_unlock+0x4f/0x210 [ 1943.534129] ? lockdep_init_map_type+0x21a/0x7e0 [ 1943.534156] ? __init_rwsem+0x129/0x1a0 [ 1943.534174] dup_mm+0x91/0x370 [ 1943.534191] copy_process+0x697e/0x6da0 [ 1943.534210] ? lock_is_held_type+0xd7/0x130 [ 1943.534228] ? find_held_lock+0x2c/0x110 [ 1943.534254] ? __cleanup_sighand+0xb0/0xb0 [ 1943.534280] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1943.534299] ? _copy_from_user+0xf2/0x170 [ 1943.534313] ? kernel_clone+0x2f8/0xa60 [ 1943.534333] kernel_clone+0xe7/0xa60 [ 1943.534350] ? lock_is_held_type+0xd7/0x130 [ 1943.534367] ? create_io_thread+0xf0/0xf0 [ 1943.534396] ? lock_is_held_type+0xd7/0x130 [ 1943.534418] __do_sys_clone3+0x1dd/0x2e0 [ 1943.534436] ? __ia32_sys_clone+0x150/0x150 [ 1943.534467] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1943.534485] ? vfs_write+0x422/0xac0 [ 1943.534501] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1943.534521] ? fput+0x2a/0x50 [ 1943.534541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1943.534564] do_syscall_64+0x3b/0x90 [ 1943.534578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1943.534595] RIP: 0033:0x7fadd0927b19 [ 1943.534604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1943.534615] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1943.534627] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 12:49:02 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x300, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@block}]}) [ 1943.534634] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1943.534641] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 12:49:02 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1943.534647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1943.534654] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1943.534676] [ 1943.628589] FAULT_INJECTION: forcing a failure. [ 1943.628589] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.628671] CPU: 0 PID: 30934 Comm: syz-executor.2 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1943.628686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1943.628694] Call Trace: [ 1943.628698] [ 1943.628703] dump_stack_lvl+0x8b/0xb3 [ 1943.628724] should_fail.cold+0x5/0xa [ 1943.628737] ? create_object.isra.0+0x3a/0xa20 [ 1943.628756] should_failslab+0x5/0x10 [ 1943.628773] kmem_cache_alloc+0x5b/0x480 [ 1943.628790] create_object.isra.0+0x3a/0xa20 [ 1943.628805] ? kasan_unpoison+0x23/0x50 [ 1943.628828] kmem_cache_alloc_bulk+0x3fa/0x780 12:49:02 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "000000000000fd000200"}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "c10b1cb806498aac"}) openat(r2, &(0x7f0000000500)='./file1\x00', 0x505000, 0xc0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) truncate(&(0x7f0000000140)='./file1\x00', 0x10001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x5, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ba272683", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25040000002c00028006000b000a000000080003000100000006000f000200000008000900050000000800030000000000080004004600000008000500c7fa0000080006001f000000ff097af60600000014000180080008000000880608000800010000004c0001801400030000000000000000000000000000000000140003000000000000000000000000000000000008000800c1ffffff08000600776c63000800050000000000080005000100000014000380080005000a01010108000500000000000800050003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x453) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/185, 0xb9}], 0x7, 0x200, 0x0) [ 1943.628855] mas_alloc_nodes+0x2a6/0x6a0 [ 1943.628880] mas_node_count+0x101/0x130 [ 1943.628897] mas_expected_entries+0x10c/0x1b0 [ 1943.628918] dup_mmap+0x433/0xf80 [ 1943.628937] ? lock_downgrade+0x6d0/0x6d0 [ 1943.628954] ? do_raw_spin_lock+0x121/0x260 [ 1943.628974] ? replace_mm_exe_file+0x4c0/0x4c0 12:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000000)='./file0\x00', 0xa0080, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x13, r1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) r4 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x13, r4, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r7, 0x4b33, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd_index=0x3, 0x3, {0x0, r7}, 0x0, 0x4, 0x0, {0x0, 0x0, r8}}, 0x9) clone3(&(0x7f0000000280)={0x100280080, &(0x7f00000000c0), 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1943.628994] ? do_raw_spin_unlock+0x4f/0x210 [ 1943.629017] ? lockdep_init_map_type+0x21a/0x7e0 [ 1943.629041] ? __init_rwsem+0x129/0x1a0 [ 1943.629058] dup_mm+0x91/0x370 [ 1943.629076] copy_process+0x697e/0x6da0 [ 1943.629095] ? lock_is_held_type+0xd7/0x130 [ 1943.629113] ? find_held_lock+0x2c/0x110 [ 1943.629140] ? __cleanup_sighand+0xb0/0xb0 [ 1943.629173] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 12:49:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0xfffffdef) openat(r0, &(0x7f0000000240)='./file0\x00', 0x80, 0x11) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x200200, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000780)={0x2040000, &(0x7f0000000100), &(0x7f0000000180), 0x0, {0xb}, &(0x7f0000000200)=""/39, 0x27, &(0x7f0000000480)=""/108, &(0x7f0000000700)=[0x0], 0x1}, 0x58) syz_io_uring_setup(0x6a44, &(0x7f00000003c0)={0x0, 0x2a5b, 0x2, 0x2, 0xe0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) [ 1943.629193] ? _copy_from_user+0xf2/0x170 [ 1943.629206] ? kernel_clone+0x2f8/0xa60 [ 1943.629226] kernel_clone+0xe7/0xa60 [ 1943.629243] ? lock_is_held_type+0xd7/0x130 [ 1943.629261] ? create_io_thread+0xf0/0xf0 [ 1943.629289] ? lock_is_held_type+0xd7/0x130 [ 1943.629311] __do_sys_clone3+0x1dd/0x2e0 [ 1943.629329] ? __ia32_sys_clone+0x150/0x150 [ 1943.629360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1943.629379] ? vfs_write+0x422/0xac0 [ 1943.629394] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1943.629414] ? fput+0x2a/0x50 [ 1943.629434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1943.629458] do_syscall_64+0x3b/0x90 [ 1943.629472] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1943.629488] RIP: 0033:0x7fadd0927b19 [ 1943.629497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1943.629508] RSP: 002b:00007fadcde9d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1943.629521] RAX: ffffffffffffffda RBX: 00007fadd0a3af60 RCX: 00007fadd0927b19 [ 1943.629529] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000280 [ 1943.629536] RBP: 00007fadcde9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1943.629543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1943.629549] R13: 00007ffd3c6b7b1f R14: 00007fadcde9d300 R15: 0000000000022000 [ 1943.629572] [ 1956.533541] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888044766000 (size 256): comm "syz-executor.2", pid 30864, jiffies 4296610379 (age 21.547s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000715251e4>] mas_alloc_nodes+0x36e/0x6a0 [<000000009f2983cf>] mas_node_count+0x101/0x130 [<00000000e5d107fd>] mas_expected_entries+0x10c/0x1b0 [<00000000fa7da0d5>] dup_mmap+0x433/0xf80 [<00000000415749ad>] dup_mm+0x91/0x370 [<00000000b2e3c79f>] copy_process+0x697e/0x6da0 [<000000003aa825e0>] kernel_clone+0xe7/0xa60 [<00000000377d8b9b>] __do_sys_clone3+0x1dd/0x2e0 [<0000000003aebfcf>] do_syscall_64+0x3b/0x90 [<00000000135df1b4>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: leak checking failed VM DIAGNOSIS: 12:49:24 Registers: info registers vcpu 0 RAX=ffffffff8419ac20 RBX=ffffffff85032800 RCX=ffffffff8417d0b1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85007e18 R8 =0000000000000001 R9 =ffff88806ce38d13 R10=ffffed100d9c71a2 R11=0000000000000001 R12=fffffbfff0a06500 R13=ffffffff858ef1d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8419ac2b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc24bd1a20 CR3=000000001a972000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 656a626f20646563 6e6572656665726e YMM02=0000000000000000 0000000000000000 2936353220657a69 7328203030303636 YMM03=0000000000000000 0000000000000000 3320646970202c22 322e726f74756365 YMM04=0000000000000000 0000000000000000 2e2e2e2e2e2e2e20 2030302030302030 YMM05=0000000000000000 0000000000000000 2030302030302030 3020303020303020 YMM06=0000000000000000 0000000000000000 6574796220323320 7473726966282070 YMM07=0000000000000000 0000000000000000 3132206567612820 3937333031363639 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff8419ac20 RBX=ffff8880081ed040 RCX=ffffffff8417d0b1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88800821fe58 R8 =0000000000000001 R9 =ffff88806cf38d13 R10=ffffed100d9e71a2 R11=0000000000000001 R12=ffffed100103da08 R13=ffffffff858ef1d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8419ac2b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc4bbdb1008 CR3=0000000008760000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 41847022c0000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000