75.411932] ? ext4_file_mmap+0x250/0x250 [ 2275.412580] ? lock_is_held_type+0xd7/0x130 [ 2275.413248] vfs_write+0x9c3/0xd90 [ 2275.413804] ? __ia32_sys_pread64+0x220/0x220 [ 2275.414499] ? __fget_files+0x270/0x450 [ 2275.415110] ksys_write+0x127/0x250 [ 2275.415678] ? __ia32_sys_read+0xb0/0xb0 [ 2275.416300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.417074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.417862] do_syscall_64+0x3b/0x90 [ 2275.418438] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2275.419216] RIP: 0033:0x7f5758b76b19 18:33:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 24) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2275.419770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.422526] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2275.423646] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2275.424678] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2275.425725] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.426787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.427823] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2275.428902] [ 2275.468618] 9pnet: Could not find request transport: fd0x0000000000000003 18:33:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0]) 18:33:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="04", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:33:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (fail_nth: 16) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:33:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 25) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:33:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 25) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:33:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2275.809309] 9pnet: Could not find request transport: fd0x0000000000000003 18:34:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:34:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 9) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:10 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 26) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="05", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:34:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 29) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (fail_nth: 17) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2287.757784] 9pnet_fd: Insufficient options for proto=fd 18:34:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd']) 18:34:10 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 26) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2300.045587] 9pnet_fd: Insufficient options for proto=fd 18:34:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (fail_nth: 18) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd']) 18:34:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="06", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:34:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 30) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 10) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:23 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 27) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:34:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 27) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd']) [ 2300.159915] 9pnet_fd: Insufficient options for proto=fd 18:34:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 31) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX]) 18:34:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:34:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='\t', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:34:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 32) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (fail_nth: 19) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2300.368815] 9pnet: Could not find request transport: fd0xffffffffffffffff 18:34:23 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 28) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 11) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX]) [ 2300.447677] FAULT_INJECTION: forcing a failure. [ 2300.447677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.448646] CPU: 1 PID: 11482 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2300.449301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.450181] Call Trace: [ 2300.450414] [ 2300.450607] dump_stack_lvl+0x8b/0xb3 [ 2300.450936] should_fail.cold+0x5/0xa [ 2300.450952] ENOMEM in journal_alloc_journal_head, retrying. [ 2300.451242] copyin+0x19/0x120 [ 2300.451266] copy_page_from_iter_atomic+0x416/0x16b0 [ 2300.451297] ? ext4_da_write_begin+0x63a/0x9a0 [ 2300.451321] ? hash_and_copy_to_iter+0x210/0x210 [ 2300.451344] ? ext4_write_begin+0x1440/0x1440 [ 2300.451361] ? lock_is_held_type+0xd7/0x130 [ 2300.451394] generic_perform_write+0x2bf/0x570 [ 2300.454746] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2300.455173] ? discard_new_inode+0x190/0x190 [ 2300.455539] ? down_write_killable_nested+0x180/0x180 [ 2300.455955] ext4_buffered_write_iter+0x164/0x460 [ 2300.456361] ext4_file_write_iter+0x3d5/0x1820 [ 2300.456753] ? lock_release+0x750/0x750 [ 2300.457083] ? ext4_file_mmap+0x250/0x250 [ 2300.457437] ? lock_is_held_type+0xd7/0x130 [ 2300.457795] vfs_write+0x9c3/0xd90 [ 2300.458098] ? __ia32_sys_pread64+0x220/0x220 [ 2300.458497] ? __fget_files+0x270/0x450 [ 2300.458833] ksys_write+0x127/0x250 [ 2300.459129] ? __ia32_sys_read+0xb0/0xb0 [ 2300.459456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.459865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.460291] do_syscall_64+0x3b/0x90 [ 2300.460590] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.461005] RIP: 0033:0x7f7530800b19 [ 2300.461305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.462689] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2300.463281] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2300.463832] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2300.464382] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.464924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.465472] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2300.466047] 18:34:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 28) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 33) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="0f", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 2300.528043] FAULT_INJECTION: forcing a failure. [ 2300.528043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.530268] CPU: 0 PID: 11487 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2300.531459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.533082] Call Trace: [ 2300.533475] [ 2300.533819] dump_stack_lvl+0x8b/0xb3 [ 2300.534412] should_fail.cold+0x5/0xa [ 2300.534991] copyin+0x19/0x120 [ 2300.535497] copy_page_from_iter_atomic+0x416/0x16b0 [ 2300.536270] ? ext4_da_write_begin+0x63a/0x9a0 [ 2300.536964] ? hash_and_copy_to_iter+0x210/0x210 [ 2300.537689] ? ext4_write_begin+0x1440/0x1440 [ 2300.538404] generic_perform_write+0x2bf/0x570 [ 2300.539137] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2300.539758] FAULT_INJECTION: forcing a failure. [ 2300.539758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.539928] ? discard_new_inode+0x190/0x190 [ 2300.541484] ? down_write_killable_nested+0x180/0x180 [ 2300.542305] ext4_buffered_write_iter+0x164/0x460 [ 2300.543054] ext4_file_write_iter+0x3d5/0x1820 [ 2300.543777] ? lock_release+0x750/0x750 [ 2300.544394] ? ext4_file_mmap+0x250/0x250 [ 2300.545049] ? lock_is_held_type+0xd7/0x130 [ 2300.545729] vfs_write+0x9c3/0xd90 [ 2300.546287] ? __ia32_sys_pread64+0x220/0x220 [ 2300.546995] ? __fget_files+0x270/0x450 [ 2300.547637] ksys_write+0x127/0x250 [ 2300.548209] ? __ia32_sys_read+0xb0/0xb0 [ 2300.548840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.549630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.550420] do_syscall_64+0x3b/0x90 [ 2300.550994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.551775] RIP: 0033:0x7f2e40357b19 [ 2300.552337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.555008] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2300.556138] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2300.557188] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2300.558252] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.559302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.560355] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2300.561439] [ 2300.561803] CPU: 1 PID: 11492 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2300.562466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2300.563322] Call Trace: [ 2300.563531] [ 2300.563717] dump_stack_lvl+0x8b/0xb3 [ 2300.564026] should_fail.cold+0x5/0xa [ 2300.564339] copyin+0x19/0x120 [ 2300.564610] copy_page_from_iter_atomic+0x416/0x16b0 [ 2300.565020] ? ext4_da_write_begin+0x63a/0x9a0 [ 2300.565389] ? hash_and_copy_to_iter+0x210/0x210 [ 2300.565778] ? ext4_write_begin+0x1440/0x1440 [ 2300.566150] generic_perform_write+0x2bf/0x570 [ 2300.566537] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2300.566944] ? discard_new_inode+0x190/0x190 [ 2300.567300] ? down_write_killable_nested+0x180/0x180 [ 2300.567723] ext4_buffered_write_iter+0x164/0x460 [ 2300.568122] ext4_file_write_iter+0x3d5/0x1820 [ 2300.568497] ? lock_release+0x750/0x750 [ 2300.568821] ? ext4_file_mmap+0x250/0x250 [ 2300.569164] ? lock_is_held_type+0xd7/0x130 [ 2300.569513] vfs_write+0x9c3/0xd90 [ 2300.569808] ? __ia32_sys_pread64+0x220/0x220 [ 2300.570190] ? __fget_files+0x270/0x450 [ 2300.570519] ksys_write+0x127/0x250 [ 2300.570812] ? __ia32_sys_read+0xb0/0xb0 [ 2300.571142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.571552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.571968] do_syscall_64+0x3b/0x90 [ 2300.572268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2300.572677] RIP: 0033:0x7f5758b76b19 [ 2300.572969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.574361] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2300.574938] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2300.575489] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2300.576036] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.576586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.577132] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2300.577693] 18:34:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX]) 18:34:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX]) 18:34:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 29) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 29) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 30) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 34) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 12) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="10", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:34:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:34:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX]) 18:34:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (fail_nth: 20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX]) 18:34:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:34:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 13) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 31) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 35) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='A', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:34:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 30) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX]) 18:34:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:34:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:34:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='tran', @ANYRESHEX]) 18:34:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 14) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 36) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:34:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 31) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:34:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='B', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:34:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='tran', @ANYRESHEX]) 18:34:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 15) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 37) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:05 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 16) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:05 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 33) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:35:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="81", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:35:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='tran', @ANYRESHEX]) 18:35:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2342.670923] FAULT_INJECTION: forcing a failure. [ 2342.670923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2342.671896] CPU: 1 PID: 11598 Comm: syz-executor.7 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2342.672513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2342.673359] Call Trace: [ 2342.673562] [ 2342.673741] dump_stack_lvl+0x8b/0xb3 [ 2342.674049] should_fail.cold+0x5/0xa [ 2342.674352] copy_fpstate_to_sigframe+0x81d/0xb20 [ 2342.674756] ? __fpu_restore_sig+0x12e0/0x12e0 [ 2342.675119] ? lockdep_hardirqs_on+0x79/0x100 [ 2342.675479] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 2342.675880] arch_do_signal_or_restart+0x10b9/0x1be0 [ 2342.676287] ? force_sig_fault+0xb2/0xf0 [ 2342.676608] ? force_sig+0xe0/0xe0 [ 2342.676889] ? trace_raw_output_x86_exceptions+0x140/0x140 [ 2342.677329] ? get_sigframe_size+0x10/0x10 [ 2342.677668] ? __bad_area_nosemaphore+0x314/0x3f0 [ 2342.678039] ? lockdep_hardirqs_off+0x98/0xe0 [ 2342.678414] ? exit_to_user_mode_prepare+0x109/0x1a0 [ 2342.678836] exit_to_user_mode_prepare+0x131/0x1a0 [ 2342.679223] irqentry_exit_to_user_mode+0x5/0x30 [ 2342.679598] exc_page_fault+0xc4/0x1a0 [ 2342.679909] asm_exc_page_fault+0x22/0x30 [ 2342.680236] RIP: 0033:0x7faa9b7d17b6 [ 2342.680527] Code: 00 00 00 00 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 6a 0f 6f 20 66 0f 74 e0 66 0f d7 d4 85 d2 74 04 0f bc c2 c3 48 83 [ 2342.681875] RSP: 002b:00007faa98d56fa8 EFLAGS: 00010293 [ 2342.682275] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2342.682812] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 2342.683341] RBP: 00007faa98d57040 R08: 0000000000000000 R09: 0000000000000000 [ 2342.683871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2342.684401] R13: 0000000020000100 R14: 00007faa98d57000 R15: 0000000000000000 [ 2342.684947] 18:35:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2342.740998] FAULT_INJECTION: forcing a failure. [ 2342.740998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2342.742646] CPU: 0 PID: 11611 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2342.743714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2342.745168] Call Trace: [ 2342.745514] [ 2342.745825] dump_stack_lvl+0x8b/0xb3 [ 2342.746353] should_fail.cold+0x5/0xa [ 2342.746890] copyin+0x19/0x120 [ 2342.747346] copy_page_from_iter_atomic+0x416/0x16b0 [ 2342.748042] ? ext4_da_write_begin+0x63a/0x9a0 [ 2342.748664] ? hash_and_copy_to_iter+0x210/0x210 [ 2342.749313] ? ext4_write_begin+0x1440/0x1440 [ 2342.749940] generic_perform_write+0x2bf/0x570 [ 2342.750578] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2342.751322] ? discard_new_inode+0x190/0x190 [ 2342.751942] ? down_write_killable_nested+0x180/0x180 [ 2342.752680] ext4_buffered_write_iter+0x164/0x460 [ 2342.753374] ext4_file_write_iter+0x3d5/0x1820 [ 2342.754030] ? lock_release+0x750/0x750 [ 2342.754598] ? ext4_file_mmap+0x250/0x250 [ 2342.755212] ? lock_is_held_type+0xd7/0x130 [ 2342.755847] vfs_write+0x9c3/0xd90 [ 2342.756360] ? __ia32_sys_pread64+0x220/0x220 [ 2342.756986] ? __fget_files+0x270/0x450 [ 2342.757569] ksys_write+0x127/0x250 [ 2342.758086] ? __ia32_sys_read+0xb0/0xb0 [ 2342.758673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.759401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.760127] do_syscall_64+0x3b/0x90 [ 2342.760656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2342.761376] RIP: 0033:0x7f5a62a86b19 [ 2342.761901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.764343] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2342.765368] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2342.766327] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2342.767308] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.768311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.769326] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2342.770377] 18:35:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:35:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x14, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 17) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:05 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 33) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 34) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2342.970862] FAULT_INJECTION: forcing a failure. [ 2342.970862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2342.971832] CPU: 1 PID: 11625 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2342.972437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2342.973237] Call Trace: [ 2342.973435] [ 2342.973609] dump_stack_lvl+0x8b/0xb3 [ 2342.973971] should_fail.cold+0x5/0xa [ 2342.974327] copyin+0x19/0x120 [ 2342.974737] copy_page_from_iter_atomic+0x416/0x16b0 [ 2342.975121] ? ext4_da_write_begin+0x63a/0x9a0 [ 2342.975466] ? hash_and_copy_to_iter+0x210/0x210 [ 2342.975821] ? ext4_write_begin+0x1440/0x1440 [ 2342.976169] generic_perform_write+0x2bf/0x570 [ 2342.976525] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2342.976907] ? discard_new_inode+0x190/0x190 [ 2342.977244] ? down_write_killable_nested+0x180/0x180 [ 2342.977636] ext4_buffered_write_iter+0x164/0x460 [ 2342.978003] ext4_file_write_iter+0x3d5/0x1820 [ 2342.978356] ? lock_release+0x750/0x750 [ 2342.978666] ? ext4_file_mmap+0x250/0x250 [ 2342.978981] ? lock_is_held_type+0xd7/0x130 [ 2342.979330] vfs_write+0x9c3/0xd90 [ 2342.979610] ? __ia32_sys_pread64+0x220/0x220 [ 2342.979946] ? __fget_files+0x270/0x450 [ 2342.980264] ksys_write+0x127/0x250 [ 2342.980536] ? __ia32_sys_read+0xb0/0xb0 [ 2342.980843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.981233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.981617] do_syscall_64+0x3b/0x90 [ 2342.981896] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2342.982294] RIP: 0033:0x7f2e40357b19 [ 2342.982569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.983926] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2342.984504] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2342.985040] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2342.985591] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.986129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.986671] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2342.987224] 18:35:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 38) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="10", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 2343.082480] 9pnet: Could not find request transport: 0xffffffffffffffff 18:35:06 executing program 6: perf_event_open(&(0x7f0000000080)={0xc2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 35) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2343.212880] FAULT_INJECTION: forcing a failure. [ 2343.212880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2343.214625] CPU: 0 PID: 11646 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2343.215795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2343.217375] Call Trace: [ 2343.217757] [ 2343.218093] dump_stack_lvl+0x8b/0xb3 [ 2343.218674] should_fail.cold+0x5/0xa [ 2343.219245] copyin+0x19/0x120 [ 2343.219739] copy_page_from_iter_atomic+0x416/0x16b0 [ 2343.220505] ? ext4_da_write_begin+0x63a/0x9a0 [ 2343.221187] ? hash_and_copy_to_iter+0x210/0x210 [ 2343.221896] ? ext4_write_begin+0x1440/0x1440 [ 2343.222587] generic_perform_write+0x2bf/0x570 [ 2343.223328] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2343.224102] ? discard_new_inode+0x190/0x190 [ 2343.224756] ? down_write_killable_nested+0x180/0x180 [ 2343.225498] ext4_buffered_write_iter+0x164/0x460 [ 2343.226237] ext4_file_write_iter+0x3d5/0x1820 [ 2343.226966] ? lock_release+0x750/0x750 [ 2343.227581] ? ext4_file_mmap+0x250/0x250 [ 2343.228225] ? lock_is_held_type+0xd7/0x130 [ 2343.228888] vfs_write+0x9c3/0xd90 [ 2343.229449] ? __ia32_sys_pread64+0x220/0x220 [ 2343.230145] ? __fget_files+0x270/0x450 [ 2343.230797] ksys_write+0x127/0x250 [ 2343.231362] ? __ia32_sys_read+0xb0/0xb0 [ 2343.231978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.232750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.233539] do_syscall_64+0x3b/0x90 [ 2343.234101] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2343.234863] RIP: 0033:0x7f5758b76b19 [ 2343.235405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.237915] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2343.238959] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2343.239988] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2343.240990] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.241961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.243018] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2343.244083] 18:35:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='tran', @ANYRESHEX]) 18:35:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:35:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 18) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:35:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 39) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='tran', @ANYRESHEX]) 18:35:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="fe", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:35:20 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 34) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 36) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:20 executing program 6: perf_event_open(&(0x7f0000000080)={0xc200, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2357.523791] FAULT_INJECTION: forcing a failure. [ 2357.523791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2357.525711] CPU: 1 PID: 11675 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2357.527358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2357.528772] Call Trace: [ 2357.529265] [ 2357.529585] dump_stack_lvl+0x8b/0xb3 [ 2357.530306] should_fail.cold+0x5/0xa [ 2357.530834] copyin+0x19/0x120 [ 2357.531459] copy_page_from_iter_atomic+0x416/0x16b0 [ 2357.532151] ? ext4_da_write_begin+0x63a/0x9a0 [ 2357.533017] ? hash_and_copy_to_iter+0x210/0x210 [ 2357.533664] ? ext4_write_begin+0x1440/0x1440 [ 2357.534536] generic_perform_write+0x2bf/0x570 [ 2357.535325] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2357.536163] ? discard_new_inode+0x190/0x190 [ 2357.536884] ? down_write_killable_nested+0x180/0x180 [ 2357.537725] ext4_buffered_write_iter+0x164/0x460 [ 2357.538515] ext4_file_write_iter+0x3d5/0x1820 [ 2357.539296] ? lock_release+0x750/0x750 [ 2357.539950] ? ext4_file_mmap+0x250/0x250 [ 2357.540641] ? lock_is_held_type+0xd7/0x130 [ 2357.541347] vfs_write+0x9c3/0xd90 [ 2357.541954] ? __ia32_sys_pread64+0x220/0x220 [ 2357.542921] ? __fget_files+0x270/0x450 [ 2357.543597] ksys_write+0x127/0x250 [ 2357.544202] ? __ia32_sys_read+0xb0/0xb0 [ 2357.544862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.545692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.546531] do_syscall_64+0x3b/0x90 [ 2357.547163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2357.547988] RIP: 0033:0x7f7530800b19 [ 2357.548588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.551402] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2357.552589] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2357.553703] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2357.554815] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2357.555919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.557025] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2357.558166] 18:35:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 40) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='tran', @ANYRESHEX]) 18:35:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 37) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 38) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2ac00, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) 18:35:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41000) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:35:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:35:33 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 35) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 41) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 19) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2370.926051] FAULT_INJECTION: forcing a failure. [ 2370.926051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2370.927205] CPU: 0 PID: 11704 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2370.927811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2370.928665] Call Trace: [ 2370.928868] [ 2370.929051] dump_stack_lvl+0x8b/0xb3 [ 2370.929359] should_fail.cold+0x5/0xa [ 2370.929654] copyin+0x19/0x120 [ 2370.929924] copy_page_from_iter_atomic+0x416/0x16b0 [ 2370.930327] ? ext4_da_write_begin+0x63a/0x9a0 [ 2370.930699] ? hash_and_copy_to_iter+0x210/0x210 [ 2370.931077] ? ext4_write_begin+0x1440/0x1440 [ 2370.931448] generic_perform_write+0x2bf/0x570 [ 2370.931829] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2370.932230] ? discard_new_inode+0x190/0x190 [ 2370.932580] ? down_write_killable_nested+0x180/0x180 [ 2370.932995] ext4_buffered_write_iter+0x164/0x460 [ 2370.933376] ext4_file_write_iter+0x3d5/0x1820 [ 2370.933753] ? lock_release+0x750/0x750 [ 2370.934080] ? ext4_file_mmap+0x250/0x250 [ 2370.934417] ? lock_is_held_type+0xd7/0x130 [ 2370.934768] vfs_write+0x9c3/0xd90 [ 2370.935078] ? __ia32_sys_pread64+0x220/0x220 [ 2370.935432] ? __fget_files+0x270/0x450 [ 2370.935758] ksys_write+0x127/0x250 [ 2370.936048] ? __ia32_sys_read+0xb0/0xb0 [ 2370.936364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.936762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.937169] do_syscall_64+0x3b/0x90 [ 2370.937447] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2370.937847] RIP: 0033:0x7f5a62a86b19 [ 2370.938120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.939457] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2370.940001] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2370.940531] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2370.941063] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.941592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.942124] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2370.942653] 18:35:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) 18:35:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 42) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX]) 18:35:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 39) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:34 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 36) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 43) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:34 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 20) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2371.275834] FAULT_INJECTION: forcing a failure. [ 2371.275834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.276814] CPU: 0 PID: 11738 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2371.277415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2371.278272] Call Trace: [ 2371.278464] [ 2371.278637] dump_stack_lvl+0x8b/0xb3 [ 2371.278949] should_fail.cold+0x5/0xa [ 2371.279261] copyin+0x19/0x120 [ 2371.279527] copy_page_from_iter_atomic+0x416/0x16b0 [ 2371.279910] ? ext4_da_write_begin+0x63a/0x9a0 [ 2371.280283] ? hash_and_copy_to_iter+0x210/0x210 [ 2371.280648] ? ext4_write_begin+0x1440/0x1440 [ 2371.281015] generic_perform_write+0x2bf/0x570 [ 2371.281386] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2371.281782] ? discard_new_inode+0x190/0x190 [ 2371.282117] ? down_write_killable_nested+0x180/0x180 [ 2371.282724] ext4_buffered_write_iter+0x164/0x460 [ 2371.283120] ext4_file_write_iter+0x3d5/0x1820 [ 2371.283497] ? lock_release+0x750/0x750 [ 2371.283801] ? ext4_file_mmap+0x250/0x250 [ 2371.284130] ? lock_is_held_type+0xd7/0x130 [ 2371.284466] vfs_write+0x9c3/0xd90 [ 2371.284741] ? __ia32_sys_pread64+0x220/0x220 [ 2371.285086] ? __fget_files+0x270/0x450 [ 2371.285402] ksys_write+0x127/0x250 [ 2371.285694] ? __ia32_sys_read+0xb0/0xb0 [ 2371.286000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.286386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.286781] do_syscall_64+0x3b/0x90 [ 2371.287064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2371.287449] RIP: 0033:0x7f5758b76b19 [ 2371.287724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.289005] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2371.289549] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2371.290057] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2371.290561] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.291078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.291584] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2371.292108] 18:35:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x4102f) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:35:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:48 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:35:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41031) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:35:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 21) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:48 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 37) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 1) 18:35:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 40) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 44) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 2) 18:35:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 22) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:48 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 38) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:35:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 45) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:35:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:35:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41041) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 2385.880060] FAULT_INJECTION: forcing a failure. [ 2385.880060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2385.882017] CPU: 0 PID: 11793 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2385.883126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2385.884594] Call Trace: [ 2385.884943] [ 2385.885259] dump_stack_lvl+0x8b/0xb3 [ 2385.885789] should_fail.cold+0x5/0xa [ 2385.886323] copyin+0x19/0x120 [ 2385.886790] copy_page_from_iter_atomic+0x416/0x16b0 [ 2385.887511] ? ext4_da_write_begin+0x63a/0x9a0 [ 2385.888148] ? hash_and_copy_to_iter+0x210/0x210 [ 2385.888815] ? ext4_write_begin+0x1440/0x1440 [ 2385.889458] generic_perform_write+0x2bf/0x570 [ 2385.890145] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2385.890871] ? discard_new_inode+0x190/0x190 [ 2385.891532] ? down_write_killable_nested+0x180/0x180 [ 2385.892273] ext4_buffered_write_iter+0x164/0x460 [ 2385.892965] ext4_file_write_iter+0x3d5/0x1820 [ 2385.893635] ? lock_release+0x750/0x750 [ 2385.894219] ? ext4_file_mmap+0x250/0x250 [ 2385.894823] ? lock_is_held_type+0xd7/0x130 [ 2385.895464] vfs_write+0x9c3/0xd90 [ 2385.895994] ? __ia32_sys_pread64+0x220/0x220 [ 2385.896681] ? __fget_files+0x270/0x450 [ 2385.897266] ksys_write+0x127/0x250 [ 2385.897778] ? __ia32_sys_read+0xb0/0xb0 [ 2385.898335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.899102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2385.900003] do_syscall_64+0x3b/0x90 [ 2385.900621] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2385.901463] RIP: 0033:0x7f2e40357b19 [ 2385.902080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.905022] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2385.906263] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2385.907433] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2385.908576] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2385.909715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2385.910862] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2385.912053] 18:35:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 41) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2385.979884] 9pnet: Could not find request transport: 0xffffffffffffffff 18:35:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2400.200599] FAULT_INJECTION: forcing a failure. [ 2400.200599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2400.201525] CPU: 0 PID: 11821 Comm: syz-executor.0 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2400.202097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2400.202869] Call Trace: [ 2400.203060] [ 2400.203241] dump_stack_lvl+0x8b/0xb3 [ 2400.203527] should_fail.cold+0x5/0xa [ 2400.203806] _copy_from_user+0x2a/0x170 [ 2400.204100] memdup_user+0x65/0xd0 [ 2400.204380] strndup_user+0x74/0xe0 [ 2400.204648] __x64_sys_mount+0x133/0x300 [ 2400.204949] ? path_mount+0x1e20/0x1e20 [ 2400.205240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.205612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.205984] do_syscall_64+0x3b/0x90 [ 2400.206257] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2400.206625] RIP: 0033:0x7fa99c5cbb19 [ 2400.206892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2400.208133] RSP: 002b:00007fa999b41188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2400.208660] RAX: ffffffffffffffda RBX: 00007fa99c6def60 RCX: 00007fa99c5cbb19 [ 2400.209154] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2400.209648] RBP: 00007fa999b411d0 R08: 0000000020000480 R09: 0000000000000000 [ 2400.210141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2400.210629] R13: 00007ffe323c96cf R14: 00007fa999b41300 R15: 0000000000022000 [ 2400.211145] 18:36:03 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 23) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41042) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:36:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 46) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 39) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:03 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 42) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 3) 18:36:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 4) [ 2400.311550] FAULT_INJECTION: forcing a failure. [ 2400.311550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2400.312514] CPU: 0 PID: 11835 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2400.313073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2400.313896] Call Trace: [ 2400.314082] [ 2400.314250] dump_stack_lvl+0x8b/0xb3 [ 2400.314526] should_fail.cold+0x5/0xa [ 2400.314799] copyin+0x19/0x120 [ 2400.315039] copy_page_from_iter_atomic+0x416/0x16b0 [ 2400.315419] ? ext4_da_write_begin+0x63a/0x9a0 [ 2400.315752] ? hash_and_copy_to_iter+0x210/0x210 [ 2400.316126] ? ext4_write_begin+0x1440/0x1440 [ 2400.316464] generic_perform_write+0x2bf/0x570 [ 2400.316838] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2400.317207] ? discard_new_inode+0x190/0x190 [ 2400.317557] ? down_write_killable_nested+0x180/0x180 [ 2400.317926] ext4_buffered_write_iter+0x164/0x460 [ 2400.318318] ext4_file_write_iter+0x3d5/0x1820 [ 2400.318652] ? lock_release+0x750/0x750 [ 2400.318977] ? ext4_file_mmap+0x250/0x250 [ 2400.319284] ? lock_is_held_type+0xd7/0x130 [ 2400.319627] vfs_write+0x9c3/0xd90 [ 2400.319894] ? __ia32_sys_pread64+0x220/0x220 [ 2400.320255] ? __fget_files+0x270/0x450 [ 2400.320557] ksys_write+0x127/0x250 [ 2400.320843] ? __ia32_sys_read+0xb0/0xb0 [ 2400.321158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.321518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.321929] do_syscall_64+0x3b/0x90 [ 2400.322197] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2400.322597] RIP: 0033:0x7f7530800b19 [ 2400.322859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2400.324233] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2400.324750] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2400.325287] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2400.325819] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2400.326356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2400.326889] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2400.327455] 18:36:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 40) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:03 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 43) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 47) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2400.457709] FAULT_INJECTION: forcing a failure. [ 2400.457709] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:36:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 5) [ 2400.458618] CPU: 0 PID: 11847 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2400.459353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2400.460192] Call Trace: [ 2400.460396] [ 2400.460577] dump_stack_lvl+0x8b/0xb3 [ 2400.460884] should_fail.cold+0x5/0xa [ 2400.461186] copyin+0x19/0x120 [ 2400.461456] copy_page_from_iter_atomic+0x416/0x16b0 [ 2400.461852] ? ext4_da_write_begin+0x63a/0x9a0 [ 2400.462216] ? hash_and_copy_to_iter+0x210/0x210 [ 2400.462604] ? ext4_write_begin+0x1440/0x1440 [ 2400.462968] generic_perform_write+0x2bf/0x570 [ 2400.463339] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2400.463730] ? discard_new_inode+0x190/0x190 [ 2400.464080] ? down_write_killable_nested+0x180/0x180 [ 2400.464468] ext4_buffered_write_iter+0x164/0x460 [ 2400.464855] ext4_file_write_iter+0x3d5/0x1820 [ 2400.465225] ? lock_release+0x750/0x750 [ 2400.465538] ? ext4_file_mmap+0x250/0x250 [ 2400.465875] ? lock_is_held_type+0xd7/0x130 [ 2400.466205] vfs_write+0x9c3/0xd90 [ 2400.466497] ? __ia32_sys_pread64+0x220/0x220 [ 2400.466856] ? __fget_files+0x270/0x450 [ 2400.467178] ksys_write+0x127/0x250 [ 2400.467476] ? __ia32_sys_read+0xb0/0xb0 [ 2400.467801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.468208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2400.468619] do_syscall_64+0x3b/0x90 [ 2400.468909] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2400.469306] RIP: 0033:0x7f5a62a86b19 [ 2400.469598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2400.470948] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2400.471531] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2400.472072] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2400.472615] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2400.473148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2400.473686] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2400.474234] 18:36:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x7ffffffff000) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:36:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:03 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 24) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 48) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2400.707882] 9pnet: Could not find request transport: 0xffffffffffffffff 18:36:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 49) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 41) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) socketpair(0x8, 0x4, 0x8e, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x406, r0) 18:36:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 44) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 25) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 6) [ 2414.490298] FAULT_INJECTION: forcing a failure. [ 2414.490298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2414.492000] CPU: 1 PID: 11894 Comm: syz-executor.0 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2414.493117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2414.494597] Call Trace: [ 2414.494961] [ 2414.495280] dump_stack_lvl+0x8b/0xb3 [ 2414.495834] should_fail.cold+0x5/0xa [ 2414.496357] _copy_from_user+0x2a/0x170 [ 2414.496909] copy_mount_options+0x76/0x180 [ 2414.497504] __x64_sys_mount+0x1a8/0x300 [ 2414.498070] ? path_mount+0x1e20/0x1e20 [ 2414.498636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.499333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.500062] do_syscall_64+0x3b/0x90 [ 2414.500579] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2414.501296] RIP: 0033:0x7fa99c5cbb19 [ 2414.501813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2414.504239] RSP: 002b:00007fa999b41188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2414.505248] RAX: ffffffffffffffda RBX: 00007fa99c6def60 RCX: 00007fa99c5cbb19 [ 2414.506198] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2414.507402] RBP: 00007fa999b411d0 R08: 0000000020000480 R09: 0000000000000000 [ 2414.508640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2414.509796] R13: 00007ffe323c96cf R14: 00007fa999b41300 R15: 0000000000022000 [ 2414.510986] 18:36:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 42) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2414.663284] 9pnet: Could not find request transport: 0xffffffffffffffff 18:36:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 26) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 50) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 7) 18:36:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 27) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 51) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x24, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 45) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = getpid() recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000000680)=""/75, 0x4b}], 0x3, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x10000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) clone3(&(0x7f0000000800)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x1c}, &(0x7f0000000380)=""/111, 0x6f, &(0x7f0000000400)=""/92, &(0x7f00000007c0)=[0xffffffffffffffff, r1, 0x0, r2], 0x4, {r4}}, 0x58) 18:36:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 43) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2427.377614] FAULT_INJECTION: forcing a failure. [ 2427.377614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2427.379598] CPU: 1 PID: 11927 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2427.380944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2427.382617] Call Trace: [ 2427.383020] [ 2427.383373] dump_stack_lvl+0x8b/0xb3 [ 2427.384005] should_fail.cold+0x5/0xa [ 2427.384603] copyin+0x19/0x120 [ 2427.385124] copy_page_from_iter_atomic+0x416/0x16b0 [ 2427.385928] ? ext4_da_write_begin+0x63a/0x9a0 [ 2427.386653] ? hash_and_copy_to_iter+0x210/0x210 [ 2427.387413] ? ext4_write_begin+0x1440/0x1440 [ 2427.388166] generic_perform_write+0x2bf/0x570 [ 2427.388931] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2427.389768] ? discard_new_inode+0x190/0x190 [ 2427.390479] ? down_write_killable_nested+0x180/0x180 [ 2427.391324] ext4_buffered_write_iter+0x164/0x460 [ 2427.392148] ext4_file_write_iter+0x3d5/0x1820 [ 2427.392909] ? lock_release+0x750/0x750 [ 2427.393561] ? ext4_file_mmap+0x250/0x250 [ 2427.394250] ? lock_is_held_type+0xd7/0x130 [ 2427.394949] vfs_write+0x9c3/0xd90 [ 2427.395549] ? __ia32_sys_pread64+0x220/0x220 [ 2427.396291] ? __fget_files+0x270/0x450 [ 2427.396955] ksys_write+0x127/0x250 [ 2427.397544] ? __ia32_sys_read+0xb0/0xb0 [ 2427.398198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.399013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.399860] do_syscall_64+0x3b/0x90 [ 2427.400457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2427.401270] RIP: 0033:0x7f2e40357b19 [ 2427.401859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.404649] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2427.405816] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2427.406918] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2427.408040] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2427.409137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2427.410232] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2427.411352] 18:36:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 28) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 8) 18:36:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 52) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2427.649403] FAULT_INJECTION: forcing a failure. [ 2427.649403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2427.651440] CPU: 0 PID: 11947 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2427.652561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2427.654036] Call Trace: [ 2427.654396] [ 2427.654714] dump_stack_lvl+0x8b/0xb3 [ 2427.655256] should_fail.cold+0x5/0xa [ 2427.655811] copyin+0x19/0x120 [ 2427.656278] copy_page_from_iter_atomic+0x416/0x16b0 [ 2427.656989] ? ext4_da_write_begin+0x63a/0x9a0 [ 2427.657630] ? hash_and_copy_to_iter+0x210/0x210 [ 2427.658295] ? ext4_write_begin+0x1440/0x1440 [ 2427.658946] generic_perform_write+0x2bf/0x570 [ 2427.659633] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2427.660377] ? discard_new_inode+0x190/0x190 [ 2427.661013] ? down_write_killable_nested+0x180/0x180 [ 2427.661720] ext4_buffered_write_iter+0x164/0x460 [ 2427.662457] ext4_file_write_iter+0x3d5/0x1820 [ 2427.663159] ? lock_release+0x750/0x750 [ 2427.663758] ? ext4_file_mmap+0x250/0x250 [ 2427.664375] ? lock_is_held_type+0xd7/0x130 [ 2427.665001] vfs_write+0x9c3/0xd90 [ 2427.665533] ? __ia32_sys_pread64+0x220/0x220 [ 2427.666184] ? __fget_files+0x270/0x450 [ 2427.666784] ksys_write+0x127/0x250 [ 2427.667314] ? __ia32_sys_read+0xb0/0xb0 [ 2427.667916] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.668651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.669399] do_syscall_64+0x3b/0x90 [ 2427.669936] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2427.670653] RIP: 0033:0x7f7530800b19 [ 2427.671186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.673667] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2427.674713] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2427.675719] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2427.676687] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2427.677648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2427.678613] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2427.679629] 18:36:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 46) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2e, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 44) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2427.913333] 9pnet: Could not find request transport: 0xffffffffffffffff 18:36:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 9) 18:36:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 29) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 53) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2428.103841] FAULT_INJECTION: forcing a failure. [ 2428.103841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2428.105472] CPU: 1 PID: 11966 Comm: syz-executor.0 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2428.106569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2428.108067] Call Trace: [ 2428.108422] [ 2428.108729] dump_stack_lvl+0x8b/0xb3 [ 2428.109416] should_fail.cold+0x5/0xa [ 2428.109942] strncpy_from_user+0x34/0x3e0 [ 2428.110537] getname_flags.part.0+0x95/0x4f0 [ 2428.111160] getname_flags+0x9a/0xe0 [ 2428.111702] user_path_at_empty+0x2b/0x60 [ 2428.112286] __x64_sys_mount+0x1e9/0x300 [ 2428.112870] ? path_mount+0x1e20/0x1e20 [ 2428.113449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2428.114181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2428.114926] do_syscall_64+0x3b/0x90 [ 2428.115461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2428.116220] RIP: 0033:0x7fa99c5cbb19 [ 2428.116739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2428.119416] RSP: 002b:00007fa999b41188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2428.120509] RAX: ffffffffffffffda RBX: 00007fa99c6def60 RCX: 00007fa99c5cbb19 [ 2428.121486] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2428.122460] RBP: 00007fa999b411d0 R08: 0000000020000480 R09: 0000000000000000 [ 2428.123444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2428.124446] R13: 00007ffe323c96cf R14: 00007fa999b41300 R15: 0000000000022000 [ 2428.125456] [ 2428.145500] FAULT_INJECTION: forcing a failure. [ 2428.145500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2428.147161] CPU: 0 PID: 11970 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2428.148248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2428.149688] Call Trace: [ 2428.150043] [ 2428.150347] dump_stack_lvl+0x8b/0xb3 [ 2428.150854] should_fail.cold+0x5/0xa [ 2428.151379] copyin+0x19/0x120 [ 2428.151845] copy_page_from_iter_atomic+0x416/0x16b0 [ 2428.152552] ? ext4_da_write_begin+0x63a/0x9a0 [ 2428.153175] ? hash_and_copy_to_iter+0x210/0x210 [ 2428.153845] ? ext4_write_begin+0x1440/0x1440 [ 2428.154514] generic_perform_write+0x2bf/0x570 [ 2428.155206] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2428.155981] ? discard_new_inode+0x190/0x190 [ 2428.156628] ? down_write_killable_nested+0x180/0x180 [ 2428.157392] ext4_buffered_write_iter+0x164/0x460 [ 2428.158094] ext4_file_write_iter+0x3d5/0x1820 [ 2428.158787] ? lock_release+0x750/0x750 [ 2428.159373] ? ext4_file_mmap+0x250/0x250 [ 2428.160015] ? lock_is_held_type+0xd7/0x130 [ 2428.160655] vfs_write+0x9c3/0xd90 [ 2428.161185] ? __ia32_sys_pread64+0x220/0x220 [ 2428.161851] ? __fget_files+0x270/0x450 [ 2428.162416] ksys_write+0x127/0x250 [ 2428.162943] ? __ia32_sys_read+0xb0/0xb0 [ 2428.163561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2428.164302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2428.165058] do_syscall_64+0x3b/0x90 [ 2428.165610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2428.166351] RIP: 0033:0x7f5758b76b19 [ 2428.166884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2428.169431] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2428.170514] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2428.171529] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2428.172536] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2428.173538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2428.174534] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2428.175574] 18:36:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 54) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 47) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 30) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 10) 18:36:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x20, &(0x7f0000000040)="5dbf8b52a8f8ab5b37407fb5853eb29fc7da54bf5528b9a94aba6eb2fbcbcec5", 0xbd, 0x0, &(0x7f0000000300)="4641c909641d29af0056d08bc7ac44a95603f66c503fb99e7c60e36a12b291d705d13b7c83de3b891d42c1800c8eab481bf261dca8212962dc35bad10b5d668cf1a68254f0554ebdec18a849161f586d05b837f2730cae2dcfc3ec74448d6e6d64baacc2688dccae783291b8e3c31d5a214fd3dead61418672e69e0379071f9981bd2ebe411665c7e4d5ba3b828608e6a42acd676810b6229b6ec2dd9fc26424749f48f86358343922c945e9d268a296a1dc662846e27f557d6d608829"}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x1, 0x5, &(0x7f0000000700)=[{&(0x7f0000000440)="864ba0ba46709caf5a51112c3198abed6f57ffe826c6e9ebf1ad7b7770f094c9eca2a344ee683be77785c6de248733ba7d83545b8a5f716496d11d345fb55a5c6cc80f3f6ffe2430df66af7394f95a9d398fb180c013328be7dfa20e4cea8348b77c2e77d8d5534dc3423f99f433636c5af5ea55787dae4979a069f4b8e2fc3c330e17426958c4dd0f8c586cdddeffb9ba8d7258f533a5854c245ffdc887858d1341c59cb3d618204100dc7f65c31a9d77ea788a49a30356dab6f5265f", 0xbd, 0x7}, {&(0x7f0000000500)="787fdd1e4702664aebb0f44405b6e81899f53d97fbdd17ff3bae99546a87555065daa9b2b0968b5cbf63f47c849fd5c4a2739eba01da8e3a3ce37d944a36589bd7c18b76e07f9d9e0c5d381b5ebf01525651cb0cb0ba8a93b6984609d364e07857e8e5007197881ce75186e46a553781567edca302e29fb0ba5e17aeb3b00bcb1af7fa8cb09e8b21164b627d8ce3492e2e608b7bfbb0f70e77b5a1d3da4704dd", 0xa0, 0x800}, {&(0x7f00000005c0)="842a02fd3dbae0169fafa70c196af9423eeed11f55c0b91bb57b6b90ba697359d60bac3d89dfa20a159d6e341283c4bc1c989d361b70dd6aa8c47d8b1d5fdc80a7c30eaa560346a84281603c3461b92786ed7d7aaca44a96a7098f4780394916b4cc4584bea154b698d8", 0x6a, 0x80000000}, {&(0x7f0000000640)="14c9a35c5c2664aafbb689d968c97b47cc9c180e3428f704d40069690a21a57bee6b", 0x22, 0xb6db}, {&(0x7f0000000680)="5248457920f0931d5dca721a0a4d04071c145ab7cc82def119b5ef80500383f70fcd802b9caac94ac08b7ba14efdb162cad1db62d8b5c0aac9a97e79cb7730194174e92aa2f491d8fa6f56ac1a408eac1308e8c82d9e909fcb0fe5cd0cdc28a622a2112bda2f2ba38a09c36b5907483efe4d17a5a181a8495186272d", 0x7c, 0xfffffffffffffff8}], 0x2000, &(0x7f0000000f00)=ANY=[@ANYBLOB="687567653d616427aed99ca719a2f1c29bb409d776950a398f966e65723c340c15d37bdf51623e799713da6385d7ba4f60ec93e7f1ebc1905dcf54ff8946970d5d6b675fbfff1c23a8da2ad55e7cbc245e5721fe4743f9b20bf9c09ef8368572abed7bde1f43ad7c742e20cb99a69f0d2d68449bbcdf5718b82da4b1b73f6c85edfe85d665f052f41cfb1fa950cdd686ee7efbb84a971a7dc33a9f1495f49c7966654f0510632c4c43a12aa8388edaac5bce0d", @ANYRESDEC=r3, @ANYBLOB=',fo7ner=', @ANYRESDEC=0xee01, @ANYBLOB=',fscontext=system_u,func=MODULE_CHECK,uid>', @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f757365723d2c7365636c6162656c2c7569643d960948e1a73d84b590d53c7b884714407ccc365dcff39b96e9f339c073a4c3b2c3f0d83cf7f0135c879d39f88b230bc72475044da3a7dc9674a5d12c93cfecb039c8ce1c9d03aa598e4d9c5b6ac33999d3cf1c1aeb8ac2a41a35b1e85e9ffcaadd922f1f3febddd0c7ff52ccc3308a6f6c61bdb154773580131bc64e8d1da98ab138328008fabc61", @ANYRESDEC=r5, @ANYBLOB=',\x00']) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r6, 0x6, 0x0) openat(0xffffffffffffffff, &(0x7f0000000800)='./file1\x00', 0x101800, 0x10c) getdents(r6, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0xee) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x4, 0xf7, 0x5, 0x0, 0x0, 0x28288, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000007c0), 0x1}, 0x40020, 0x5, 0xfffffff9, 0x1, 0x0, 0x1, 0xffff, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xd, r6, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x259d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 18:36:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:46 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 45) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x64, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 11) 18:36:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 55) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2443.575385] loop4: detected capacity change from 0 to 264192 [ 2443.593496] 9pnet: Could not find request transport: 0xffffffffffffffff 18:36:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 48) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 31) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:46 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 46) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 12) [ 2443.727814] loop4: detected capacity change from 0 to 264192 18:36:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7e, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2443.778698] FAULT_INJECTION: forcing a failure. [ 2443.778698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2443.780345] CPU: 1 PID: 12018 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2443.781335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2443.782638] Call Trace: [ 2443.782936] [ 2443.783212] dump_stack_lvl+0x8b/0xb3 [ 2443.783693] should_fail.cold+0x5/0xa [ 2443.784144] copyin+0x19/0x120 [ 2443.784555] copy_page_from_iter_atomic+0x416/0x16b0 [ 2443.785178] ? ext4_da_write_begin+0x63a/0x9a0 [ 2443.785929] ? hash_and_copy_to_iter+0x210/0x210 [ 2443.786522] ? ext4_write_begin+0x1440/0x1440 [ 2443.787064] generic_perform_write+0x2bf/0x570 [ 2443.787614] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2443.788258] ? discard_new_inode+0x190/0x190 [ 2443.788841] ? down_write_killable_nested+0x180/0x180 [ 2443.789471] ext4_buffered_write_iter+0x164/0x460 [ 2443.790068] ext4_file_write_iter+0x3d5/0x1820 [ 2443.790622] ? lock_release+0x750/0x750 [ 2443.791202] ? ext4_file_mmap+0x250/0x250 [ 2443.791745] ? lock_is_held_type+0xd7/0x130 [ 2443.792262] vfs_write+0x9c3/0xd90 [ 2443.792719] ? __ia32_sys_pread64+0x220/0x220 [ 2443.793282] ? __fget_files+0x270/0x450 [ 2443.793872] ksys_write+0x127/0x250 [ 2443.794351] ? __ia32_sys_read+0xb0/0xb0 [ 2443.794865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.795527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.796240] do_syscall_64+0x3b/0x90 [ 2443.796738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2443.797333] RIP: 0033:0x7f5a62a86b19 [ 2443.797812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.799922] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2443.800843] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2443.801709] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2443.802502] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2443.803384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2443.804249] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2443.805085] 18:36:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 56) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:36:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xc0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:36:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:59 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 47) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) close_range(0xffffffffffffffff, r1, 0x2) 18:36:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 13) 18:36:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 49) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 32) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 57) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2456.734671] 9pnet: Could not find request transport: 0xffffffffffffffff 18:36:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 33) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:36:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 14) 18:36:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 50) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:36:59 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 48) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:37:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) read$snapshot(r0, &(0x7f0000000000)=""/79, 0x4f) [ 2456.988433] FAULT_INJECTION: forcing a failure. [ 2456.988433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2456.990175] CPU: 1 PID: 12069 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2456.991379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2456.993069] Call Trace: [ 2456.993468] [ 2456.993828] dump_stack_lvl+0x8b/0xb3 [ 2456.994436] should_fail.cold+0x5/0xa [ 2456.995049] copyin+0x19/0x120 [ 2456.995573] copy_page_from_iter_atomic+0x416/0x16b0 [ 2456.996387] ? ext4_da_write_begin+0x63a/0x9a0 [ 2456.997111] ? hash_and_copy_to_iter+0x210/0x210 [ 2456.997856] ? ext4_write_begin+0x1440/0x1440 [ 2456.998581] generic_perform_write+0x2bf/0x570 [ 2456.999335] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2457.000179] ? discard_new_inode+0x190/0x190 [ 2457.000868] ? down_write_killable_nested+0x180/0x180 [ 2457.001686] ext4_buffered_write_iter+0x164/0x460 [ 2457.002455] ext4_file_write_iter+0x3d5/0x1820 [ 2457.003197] ? lock_release+0x750/0x750 [ 2457.003836] ? ext4_file_mmap+0x250/0x250 [ 2457.004504] ? lock_is_held_type+0xd7/0x130 [ 2457.005195] vfs_write+0x9c3/0xd90 [ 2457.005769] ? __ia32_sys_pread64+0x220/0x220 [ 2457.006480] ? __fget_files+0x270/0x450 [ 2457.007155] ksys_write+0x127/0x250 [ 2457.007733] ? __ia32_sys_read+0xb0/0xb0 [ 2457.008396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.009222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.010035] do_syscall_64+0x3b/0x90 [ 2457.010628] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2457.011437] RIP: 0033:0x7f7530800b19 [ 2457.012048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.014783] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2457.015961] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2457.017047] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2457.018131] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.019210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.020325] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2457.021456] [ 2457.091604] FAULT_INJECTION: forcing a failure. [ 2457.091604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2457.093451] CPU: 0 PID: 12079 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2457.094594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2457.096171] Call Trace: [ 2457.096529] [ 2457.096859] dump_stack_lvl+0x8b/0xb3 [ 2457.097410] should_fail.cold+0x5/0xa [ 2457.097978] copyin+0x19/0x120 [ 2457.098459] copy_page_from_iter_atomic+0x416/0x16b0 18:37:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 15) 18:37:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 58) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2457.099214] ? ext4_da_write_begin+0x63a/0x9a0 [ 2457.100028] ? hash_and_copy_to_iter+0x210/0x210 [ 2457.100712] ? ext4_write_begin+0x1440/0x1440 [ 2457.101373] generic_perform_write+0x2bf/0x570 [ 2457.102043] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2457.102772] ? discard_new_inode+0x190/0x190 [ 2457.103416] ? down_write_killable_nested+0x180/0x180 [ 2457.104173] ext4_buffered_write_iter+0x164/0x460 [ 2457.104860] ext4_file_write_iter+0x3d5/0x1820 [ 2457.105546] ? lock_release+0x750/0x750 [ 2457.106120] ? ext4_file_mmap+0x250/0x250 [ 2457.106726] ? lock_is_held_type+0xd7/0x130 [ 2457.107346] vfs_write+0x9c3/0xd90 [ 2457.107890] ? __ia32_sys_pread64+0x220/0x220 [ 2457.108541] ? __fget_files+0x270/0x450 [ 2457.109129] ksys_write+0x127/0x250 [ 2457.109651] ? __ia32_sys_read+0xb0/0xb0 [ 2457.110235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.110964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.111718] do_syscall_64+0x3b/0x90 [ 2457.112278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2457.113007] RIP: 0033:0x7f2e40357b19 [ 2457.113525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.116003] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2457.117041] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2457.118013] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2457.118991] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.119983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.120966] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2457.121977] [ 2457.160920] FAULT_INJECTION: forcing a failure. [ 2457.160920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2457.162734] CPU: 0 PID: 12084 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2457.163893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2457.165428] Call Trace: [ 2457.165797] [ 2457.166124] dump_stack_lvl+0x8b/0xb3 [ 2457.166677] should_fail.cold+0x5/0xa [ 2457.167231] copyin+0x19/0x120 [ 2457.167705] copy_page_from_iter_atomic+0x416/0x16b0 [ 2457.168448] ? ext4_da_write_begin+0x63a/0x9a0 [ 2457.169115] ? hash_and_copy_to_iter+0x210/0x210 [ 2457.169770] ? ext4_write_begin+0x1440/0x1440 [ 2457.170442] generic_perform_write+0x2bf/0x570 [ 2457.171112] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2457.171836] ? discard_new_inode+0x190/0x190 [ 2457.172477] ? down_write_killable_nested+0x180/0x180 [ 2457.173195] ext4_buffered_write_iter+0x164/0x460 [ 2457.173899] ext4_file_write_iter+0x3d5/0x1820 [ 2457.174546] ? lock_release+0x750/0x750 [ 2457.175129] ? ext4_file_mmap+0x250/0x250 [ 2457.175711] ? lock_is_held_type+0xd7/0x130 [ 2457.176348] vfs_write+0x9c3/0xd90 [ 2457.176877] ? __ia32_sys_pread64+0x220/0x220 [ 2457.177501] ? __fget_files+0x270/0x450 [ 2457.178097] ksys_write+0x127/0x250 [ 2457.178614] ? __ia32_sys_read+0xb0/0xb0 [ 2457.179189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.179917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.180659] do_syscall_64+0x3b/0x90 [ 2457.181196] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2457.181918] RIP: 0033:0x7f5758b76b19 [ 2457.182433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.184915] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2457.185962] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2457.186944] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2457.187942] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.188916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.189903] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2457.190903] 18:37:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2457.349485] 9pnet: Could not find request transport: 0xffffffffffffffff 18:37:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 51) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 2457.554982] audit: type=1400 audit(1658342220.628:10): avc: denied { write } for pid=12100 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:37:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 34) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0d0000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="c559e12074ec7f923c42c844baa2ff030000000000000dc54d966a6c7d1861110cbb3e358575c057a0211c7939a2482c56304a48ef843d085251ee956d2afcae29db51167928f4f9ff007f03f5ff2ed788042a4971"], 0x20}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xfffffffe, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pread64(r4, &(0x7f0000000400)=""/4096, 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write(r5, &(0x7f0000000080)="01", 0x41030) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x0, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:37:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 52) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:15 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 49) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 16) 18:37:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x112, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:37:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 59) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:37:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 35) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 17) 18:37:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 60) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2473.162945] 9pnet: Could not find request transport: 0xffffffffffffffff 18:37:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 61) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:37:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 18) 18:37:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 36) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x6, 0x4, &(0x7f0000000580)=[{&(0x7f0000000380)="72a0cda71bb0839a113bfd53865891b724a85fda0656ea4785076779d30d91cd5ed73b0523d1d8fb3d921d9031ce5ed6f435cf0dcee1f52983bf5937ccc20a954d1abc1cf891010041a73d3bc68f88a20358dce7bb9a", 0x56, 0xfff}, {&(0x7f0000000400)="ce9ef961acdbc62bbf856599942b8ab427fcade1abfa583a0b026ced1c698a35d269dc8622851c9edc6833e22eee23149716810eb4dbedb93ff6f4e29afc75646620edb756778ee95e2879a5949d9b7f7a55b0be", 0x54, 0x100000001}, {&(0x7f00000001c0)="f2643cbd7d99cb", 0x7, 0x4}, {&(0x7f0000000480)="7cbd7e7bf47df8a7f17be6f59a1a47a0270692faaa5afaa6232e2fc82bb25d8aac2f03600577ffc708fbf5d170719f36e39724f189d0f6858d97aaa5599e191aa93eaa34e85b382a262b239e29fec43adb94954f7b2e0ecefbc1beea3b8b3ce0bf6f8ea1558b06d118649ae820f143954aac9622eda8b36e822efa3c2af3ddef9c0a61aafdddee7307711b37a9142de47ccd5d6551ac47b81f1b00b2442bece7fd2d77231a61f0d08ea4c80104ac5ee88646bf7abf9b0b8ce516e6859a3fd483a39bcc960b666a8104c88a26786c61beadafe3428bd42c43b70472ac1aa248", 0xdf, 0x703}], 0x0, &(0x7f0000000600)={[{@jqfmt_vfsv0}, {@prjquota}, {@usrquota}, {@quota}, {@bsdgroups}, {@journal_path={'journal_path', 0x3d, './file1'}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_gt={'fowner>', r0}}, {@obj_role}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '\\/$&('}}, {@euid_eq}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:37:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 50) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 53) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x281, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2487.982481] FAULT_INJECTION: forcing a failure. [ 2487.982481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2487.984379] CPU: 1 PID: 12160 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2487.985526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2487.987070] Call Trace: [ 2487.987448] [ 2487.987775] dump_stack_lvl+0x8b/0xb3 [ 2487.988343] should_fail.cold+0x5/0xa [ 2487.988917] copyin+0x19/0x120 [ 2487.989424] copy_page_from_iter_atomic+0x416/0x16b0 [ 2487.990198] ? ext4_da_write_begin+0x63a/0x9a0 [ 2487.990894] ? hash_and_copy_to_iter+0x210/0x210 [ 2487.991634] ? ext4_write_begin+0x1440/0x1440 [ 2487.992356] generic_perform_write+0x2bf/0x570 [ 2487.993053] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2487.993825] ? discard_new_inode+0x190/0x190 [ 2487.994493] ? down_write_killable_nested+0x180/0x180 [ 2487.995275] ext4_buffered_write_iter+0x164/0x460 [ 2487.996015] ext4_file_write_iter+0x3d5/0x1820 [ 2487.996728] ? lock_release+0x750/0x750 [ 2487.997324] ? ext4_file_mmap+0x250/0x250 [ 2487.997976] ? lock_is_held_type+0xd7/0x130 [ 2487.998602] vfs_write+0x9c3/0xd90 [ 2487.999167] ? __ia32_sys_pread64+0x220/0x220 [ 2487.999861] ? __fget_files+0x270/0x450 [ 2488.000506] ksys_write+0x127/0x250 [ 2488.001061] ? __ia32_sys_read+0xb0/0xb0 [ 2488.001620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2488.002410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2488.003219] do_syscall_64+0x3b/0x90 [ 2488.003798] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2488.004584] RIP: 0033:0x7f5a62a86b19 [ 2488.005140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2488.007691] loop4: detected capacity change from 0 to 264192 [ 2488.007847] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2488.007877] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2488.011187] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2488.012178] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2488.013150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2488.014353] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2488.015662] [ 2488.027279] journal_path: Lookup failure for './file1' [ 2488.028436] EXT4-fs: error: could not find journal device path 18:37:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 19) 18:37:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 62) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2488.128835] loop4: detected capacity change from 0 to 264192 [ 2488.134956] journal_path: Lookup failure for './file1' [ 2488.135891] EXT4-fs: error: could not find journal device path 18:37:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:31 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 37) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 18:37:31 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 51) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2488.477573] 9pnet: Could not find request transport: 0xffffffffffffffff 18:37:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x480, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:37:46 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x4, 0x8, 0x0, 0x1, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x408c1, 0x5, 0x2, 0x0, 0x1, 0x2, 0x101, 0x0, 0x4, 0x0, 0x1}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x2002, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x80, 0x1f, 0x0, 0x20, 0x0, 0x8000, 0x50000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x4, @perf_config_ext={0xffffffffccf4aafc, 0x7}, 0x702, 0x2, 0x3, 0x4, 0x2, 0x10001, 0x4}, 0x0, 0x10, r1, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000001c0)) write(r2, &(0x7f0000000080)="01", 0x41030) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0xee) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x9, 0x1, 0x6, 0x81, 0x0, 0x4, 0x104c0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xff, 0x76}, 0x8208, 0x6, 0x1f, 0x6, 0x6, 0x401, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:37:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 20) 18:37:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 63) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:37:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 54) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 38) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:46 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 52) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2503.722408] FAULT_INJECTION: forcing a failure. [ 2503.722408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.723433] CPU: 1 PID: 12218 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2503.724052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2503.724901] Call Trace: [ 2503.725106] [ 2503.725284] dump_stack_lvl+0x8b/0xb3 [ 2503.725584] should_fail.cold+0x5/0xa [ 2503.725885] copyin+0x19/0x120 [ 2503.726151] copy_page_from_iter_atomic+0x416/0x16b0 [ 2503.726554] ? ext4_da_write_begin+0x63a/0x9a0 [ 2503.726914] ? hash_and_copy_to_iter+0x210/0x210 [ 2503.727294] ? ext4_write_begin+0x1440/0x1440 [ 2503.727656] generic_perform_write+0x2bf/0x570 [ 2503.728029] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2503.728448] ? discard_new_inode+0x190/0x190 [ 2503.728801] ? down_write_killable_nested+0x180/0x180 [ 2503.729203] ext4_buffered_write_iter+0x164/0x460 [ 2503.729587] ext4_file_write_iter+0x3d5/0x1820 [ 2503.729957] ? lock_release+0x750/0x750 [ 2503.730284] ? ext4_file_mmap+0x250/0x250 [ 2503.730616] ? lock_is_held_type+0xd7/0x130 [ 2503.730961] vfs_write+0x9c3/0xd90 [ 2503.731252] ? __ia32_sys_pread64+0x220/0x220 [ 2503.731617] ? __fget_files+0x270/0x450 [ 2503.731791] FAULT_INJECTION: forcing a failure. [ 2503.731791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.731933] ksys_write+0x127/0x250 [ 2503.733831] ? __ia32_sys_read+0xb0/0xb0 [ 2503.734153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.734553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.734955] do_syscall_64+0x3b/0x90 [ 2503.735245] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2503.735639] RIP: 0033:0x7f7530800b19 [ 2503.735924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.737292] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2503.737879] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2503.738423] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2503.738966] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.739507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.740051] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2503.740611] [ 2503.740791] CPU: 0 PID: 12221 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2503.742007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2503.743627] Call Trace: [ 2503.744021] [ 2503.744375] dump_stack_lvl+0x8b/0xb3 [ 2503.744952] should_fail.cold+0x5/0xa [ 2503.745534] copyin+0x19/0x120 [ 2503.746041] copy_page_from_iter_atomic+0x416/0x16b0 [ 2503.746823] ? ext4_da_write_begin+0x63a/0x9a0 [ 2503.747517] ? hash_and_copy_to_iter+0x210/0x210 [ 2503.748245] ? ext4_write_begin+0x1440/0x1440 [ 2503.748956] generic_perform_write+0x2bf/0x570 [ 2503.749668] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2503.750428] ? discard_new_inode+0x190/0x190 [ 2503.751097] ? down_write_killable_nested+0x180/0x180 [ 2503.751861] ext4_buffered_write_iter+0x164/0x460 [ 2503.752601] ext4_file_write_iter+0x3d5/0x1820 [ 2503.753293] ? lock_release+0x750/0x750 [ 2503.753879] ? ext4_file_mmap+0x250/0x250 [ 2503.754522] ? lock_is_held_type+0xd7/0x130 [ 2503.755191] vfs_write+0x9c3/0xd90 [ 2503.755752] ? __ia32_sys_pread64+0x220/0x220 [ 2503.756462] ? __fget_files+0x270/0x450 [ 2503.757108] ksys_write+0x127/0x250 [ 2503.757677] ? __ia32_sys_read+0xb0/0xb0 [ 2503.758320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.759108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.759894] do_syscall_64+0x3b/0x90 [ 2503.760494] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2503.761266] RIP: 0033:0x7f5758b76b19 [ 2503.761834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.764442] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2503.765558] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2503.766588] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2503.767632] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.768685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.769720] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2503.770795] 18:37:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 21) 18:37:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 55) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:37:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 39) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001500)={0x5, 0x80, 0x8, 0x1, 0x93, 0x40, 0x0, 0x9, 0x80, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x2000, 0x892, 0x8001, 0x0, 0x8001, 0x4, 0x3, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x7fffffff, r0, 0x2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) chmod(&(0x7f0000000240)='./file1/file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b0d0000000000000000100000000c00018008000100", @ANYRES32=r6, @ANYBLOB="bef95d0dfb098424fb004b"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001400)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000400)="7c3979c6cea0b39c1d8ae0d75c93cc4c68e12fe98643e9f82b57816a6c9220767007681be0654ac2dfef050ed5db64b96242f7947179da1c4e3b5fb20569bf67de49406dfb8880608aca3a08184efc8e82a6dbd4e36a395d02c1553c8612619b31dfbb81cec780d0c267699f367d5e70f4668dd8c9b9cda3bb67e2810379b53cea9a6cbe7875e820b620b991678f060fff507ad4d4af43727abfc9c3549fd3cdb7a25c86d758775863dcd0358ff6dba8bc84dcd885b2e3ffe9cda6c612f03cbe18439e3369ccc2b4df45b3a6dd6ab806899daf39c918d8e065c2f4fb492879c30b2dc3e36bf87618534b061148f26db9249497fe85d3e7fac4e64a35c1a580d1a716fa514a8feecaf583f2ae9fed3532f10bfa7a802c9b6c04c33dfdc153e09ac2cf5642e668b16f98b1fd90b1089664e9462443e6b3f82f1f8a08addfeb40c0ca6c00f51ad3004aed52a1d1d0fcfe3e0eecebc60ac5451982945470ce4c49d62effbf1b9737cec76bd779459edacaff661ebac25bb8558c3cd1a5e5ba4e09ac2eee387323389a26feb9df39739158fd2d81e5324e597d3e88d39b1db02bf274f8cd1020a9232d808a3b45e4c459ccb7699f3357f428fad21e658dbabd91e5726bfe831438a335115a19f2b1d02cf90a8a1565ab7b1f3d95aef2e7bc31e7b108b8ee535528dda18456ba91703a7112b4738ee84344c8bce53f40dfdd6c02af7c839348f598dab92649928810d1b7e234e6cc6de054c06432cf20ef823f21426e8b2ca00cfbe38a94114d2c1186f3aea40f523fd0dde1eb9a81cf447fb807915baf5aeb73b32ec3c4b99f02d05c889a75806ec452a0df747c3dd5b9f895271b7a7888b3b967bd6263a4636bb1049b99b2b75de8465f812ff91fed41e6d8be503b06ce399b27a67b347b42df7bc11f086cee2582aaecfe54e9625e6ce4a233f837476eeee0baceb90708c3dbb46badba741ad4a2f38ae2802f41df77ccf726f5fd962521011e75f9bd3a8705c3371c02dad8f8d64dcd0647f1783d9af52b8569e3a4f6d4de216340f4b568834e4b38f7b15832c227046b4f1c43207ee50f0d3ec957d014bf9bbb2120c20f756ed347aa6c00606ccea87bd9a3f3f0589b000d76fa7884ffd6ad1775437782c6cdecf828cb0c3a656a25d3c4ef5605487539ffb7bad2d336abc953f93fe687e18d7226c1b6ef475971469a2888ab04d5c475dd5a418c7abf0ee28faa6a002f8359e5cb5a0c85720233e5022a6626e1612d05e4355b810da0cfae10f1c7aa1d7df3ee6f233a822b12204f20d59abe83f0bf6601e0d2d8ee1b9c7eed49413c032f3ce1a17107243234f9a600e83b9b5d33aa00b483e874d9f03a2b58aaec07bb2516a6c2265b1c51e87cba7301368edf6dc01241c831c8116bfa85682c46aa58760d8783829765892822379ea2c8c75185347a3eacf07f69526b4b32ecd9578904433edcc5a8698a2709e8968e3f864fca3300b9ba166a8375a471de8d34bde5a128c8f918000fde307af5eaac24365e3ef7b49e00e0ba5f908d48c7581baae77683e74cb32b49bb177b738639397fc5654d9022a24549373df14b00c0711a3414a67b5711410ef95b14cf46c1798af0b1c37a273ae538267ffe166f963bb353f3e721b48945aec0de7db099ab7297ef9c36fb7fcad3956d9ec54e12e58e3ac0534c47007660419c40bb7cf36a8717f5fbc563fc1be98fd7eb9cb608638d9f070e384699673a465d1f4fbb5a52cada49a1fed5f7fd2d2955ec0f2236a87c796e5b2edf1badb6574bbc58f9da518ea4163d194180baca05546ae3f1f0a6aa8ba305f0e134b2c6c4215cdd4ecb622eb9cf55fc6933d95cce8b8c457ee253c8c78b1301500293930f40d043aab8cf067157dbccae31ddbcf7e3bc52de35de618cb9ad8930ab5059137c8795f997e49c3b28cc859025160bfb5e7ab33795a6fb49f53439943b8ea2a5b605e66d25a4b36273d015b4f2528ac50dd0082b458a39fc50bd9ebca3f346209e91a5d1db5fed41fcc92de6d96e5c19e56ca8d1aad992fa787d0f5cbc36b91beedfe560769a91930f85c929a24203da01ab234a275d6bb69b4fe190bd09a15c920ad19ee06e896e0034131d7cf5e848e62cce5fac22fde7583c906df93180583b763b30f8d06600692dc12fbfee86a572e83a45421c8e91d4521ebab387defd3a4d11e3da2c4207bf4e06a4651d27a0b45c8836f8b86aeadee6fbbe908ef6adb60746b98018e2a8354c264318345ba47a3a56abd7ff7a5ee765625031c943462006f4f080fea6b211ee27c7dd9bcfc266e8d2c7e6713c25406c0b6156cd7f9522676349c6d52c4b132834f24f51f8261a5b77c4fb596199049c980fcdf36169f688c5f3d769c0983a48723cbc83ada5b02cd96c2af609d4b77fb0799a04b7173060df2e0ae4585760c50d31fe0280f158e02ae620e8b4c5a7b600203be350fc35157a6a0ca1e85b675fc908caa241c7dc902141351c22dc62e756c8a6c1a3a92763dd670b1fbaed838f371038ccc6edf701c44d15860b2754b675c1a61f2f23e62d642eafc934838d99b61bd59d16b5e9d604194767cb4916f794a00ca06384c00318e288c293b38cdcbcf3bcbdb84c99c62a7c62fd915103642b41f0cf8ba760d33331fd65a3909b01a6e20bfbce97b104f8e5972b8949b801d05c7aa360f11f43379d29152b0c7b3cd53f3bb29b0a2168e6459d8f9db85e15793786e26039f75d052f9401cbb974d04acaed89ea45264866fbd239f57a46c4791e8c16972a2c46257150c63132a13d10d58fa5001592e49875d4062d4d8c9a5a48c0a1a736f63f4e4f8ad44a2896bd6bf272c6a95ecc3e40bff4469d3919051b6cfc10c3e0588162fca0225d1fa58fce2f3603db8815cf3487419d1a326a93ebf446f1e8b5ccdc613be8a61a1bac1de01803a9fa30ce09788c8c1a80cfd26f29732476f9a9c0ba74e488d0d6cb7e2a141095f4e949b08e63c40586aaebf01c4ab5243c15f4c2d5f6234dc8fdfb7fc593eb2f7674fd8f9b19764d8bf777e3babb5a6ae9f809e4c2e8d211d9334897bea6357aa144144da779305694ff0af277fb65ce316051126822675e7f38d2048558916be186db734d09dc2f0e60b31ed7217b9330d00b4c1a39e7fa79ec07696e8c56ba5bd8fd13fe0d0ce28deb729ead9e67a30f3b227df52d5e4a00514176c18ca99ab8c7c2916d044aa9ec6e4ec42ecc38e6d42f9fe692321728b5ded8818c42d8f0aab6730c32ee8cf3aaf7159f55096833ee1b0ce9f5fe3f6c99f57af877c4eaf6c6e34196f7c282249c6cc1d2ad3e1cfb53a62f454873852d7476e82f9c77f416663ed539e2fbaa01abad38b3d4f2bbd2399e10ac8df66fe4bf732d7a282c8282eb2a0cf587230ba959f051b1f4863a0b5f9a5b2bf4c9c840820f851199d591f7819fe1dfe8db2f3add2249402c5eb2d5dd260418658a02f3e9478be6af6ab723867ef9173de58464efd13c3630c64961f789e7aea77f0642d29ffbb4c5ba2c7762c7820f44ffd01283c2a40839ca06f91a4df7414a9c37210e9966ae74ecda193e1a5c8b643acbede8b9af57eff8128cfaf1be20979d984c75a5e31f0ef8b9c2d01a56e84d8e04511e30249cfbaaceee87d4e2b932a33f5225dd9852b02b980e3304adf0816bd24599e7811453c0848c9efcd980e5474d566ec4027e3ea0b0e2a5b1736e860868cbcaae90ed4a097404d94697579cdf9ccc5eca53c8810329bfadc2b4e0e115370cfef2dec1661c73746aa0f6e956c30bb2c4749d6e920c89e4058f6864a48055e3c051e2f43a0df908f02a609c54cd64ff10a9a173553cf4a7be26d6927b2a8f889dd537a831648ef3387a40cf0d60334d61eb5001ca1bf6c0d6f51883c71ecd92394a83b66f1f2416706bab44f71711a945cc5a62af6f44a83e2e9a9ebb7af3cb20188cdea9daba0c79902cc5adcb984b25babd35b08164f413d6650c2a73cca7ac28c4ba418a8ce993dc66702134887e3d259a922851642ac785e7e1c73e86cc3e977c45f117cea8495682a31ee0b6d396db5e42a1fd5a3d53618e47842ff03ac5bd89304b77868512449805a09e301ea9a3301c3023fa1ebb4d52ca4528d247c3736aa8d1ea3717dab9abaade2081d10179eb568551133957ab36eeacd8e7a71e85464bacae08dd8b35d5b0d829aeca5aa8807e6c2f246046c6644298fece0fad485d7666110e2d46cfd36488eb0f4ffccb4f60d5b3e6791d456fc8f2190a8c3eb39d44870527555a31200c4c905e4fa1be5b1d8b0016a5b6524a93202751efcc8e0d86c1624422cf42470028bd6edd13acff3b4861fd408a73a86aaa322f881c61f1eefbf9e35c7dfa850c8b31b69f47a8dc8a746d02eeb015ecab70f1460c40e12ed45d2f4b7f77bec6327eff5f9465a545f131cb310dc2a6e1e6dde9cd9e8c46324e3bb489552f128225e51d7b65e0a8dd9829053957a0682ce593a5ef4f4fce3f2bc7fe1282f39e07846d847bf7255cc51ad469f96b1c88a92d15b1661bb9838d3e160addb236312b1b35fa2f566c200485ec5d91ad8ffea35cb840f47878ea96cb88e034fea6de1d002134cb2dd90010df798fd0bcf0faafb47ac0f70d42da8cb57d4828511a142ec58bfdcbce00db212f5111ea2ce5c295c58da2741fa083b3962a850907d016ee9e61852761986e0262c3b5090349a6d5c32bb8460bb24b54309fd65436bbcb42b6cbdd7f91736c63bc0af2bab951967e4c2b59c3efeaca5e4ca9998372595c5ae4c2829b8cd99b44dd43a2d889ae125d81ad71ca80acf183efccecd8aa9def6c8fb27634f3594a7be3cfa0a89c2c941fad99b2c4278ea5621e22b5eecd3407d94e1a1c232c74e961687c2c28d907da7fcfc3f350ba8ea1a2b731a21243c29e2bc70dcb85fdf617c62f3b71483114c479b04b2634f413f65150fc72e3a4f2270344fae95f9e1ba807c6ee82ffef4cf9a86329f37c8ea044a9e2c9b1a6ab759ca58ed5fb91f9862d30120790817ffc5102da9e72a5e9544727cede5aef7562bb736eee3b6dcfc821021fc54ee550ce3458869d2f94d4aaf6e46874d1e34fd21c0a5eae3a0842d601ab29e48650727b2a9335cfd569bd4411b1eac1314814eb72a3cbdd8aa865ae46e7ea4dc03f39c4a4f07b0b1371671be621053f88c4a7ccf512863f1b4ede2cac2ccb50ca2c621e455a16c2e2ff50554a3977dcb3fc2697b1a1abde4f520bd06a2fd78b25a49fe220b24a3f6128630ea2bebe98c7aba097ce0dfece2287b65fd493d48262b0d4eaa48509b1db6a1143296502e3c5c7774496e95ecdc68b159cf08e7b5536ca830d1f0d97e9e938af6c5bd3cec50105f28d547e16e8a5eba1eb665e7d4bc31cc2331fc9ba403b174a7d146b471ce443b8b0286d37d4cdc9110a59cd132c70087e7306172caee2b4e5ba5fed8b00f94c8c2eec357abb685c6ed4bbd55df8448ed34a82d1841ea5474a1d62b728710cd76b87aaf01f329ba46a99664103fbab5e2dd78037306d52a949e962dc126f56c80f50b343510032750ad51e49e5bb498b0d4da1b83d3e8526002980dccca2a501e82e61fb25f4417373bcb806436a966c4dbd15fecc04a23f3cd62eb7d9710f97fdfc3d0475ccdbed01ff52800160705059b2f550ba6f99a234a7e3c35fc05a0d4dc45633377fe5cec35cbf0c35a28c61f30b6343831192ee1abaff0fb0304403fe8ae76d27b30c16ad99cdc34ffbeeda0ccd0d234109385f7a438e1e90205e06df615fe7d786c5380e624343a7b86515577c29", 0x1000, r3}, 0x68) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1f, 0x80240) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000001580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000031d3fc2dd5e7ec98bb5a35000000e4e5664b6e3ec5cb6ba880e4e5f96aecef600537d813f70c7e8af7571598f2e805edc2396bb7018b950c4f2f7a383d"]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x7ffffff7) perf_event_open(&(0x7f0000001480)={0x3, 0x80, 0x40, 0x7e, 0x1, 0x8, 0x0, 0xffffffff80000000, 0x4002, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000300), 0x3}, 0x0, 0x8, 0xffc, 0x6, 0xe1c, 0x7, 0x4, 0x0, 0xb91, 0x0, 0x800}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) 18:37:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x500, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2504.030213] 9pnet: Could not find request transport: 0xffffffffffffffff 18:37:47 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 53) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:37:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 64) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:37:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 22) 18:38:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 40) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 54) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1a00000, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid}, {@access_uid={'access', 0x3d, r1}}, {@access_any}, {@loose}], [{@context={'context', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '\xc0)(/\xee\xe3*\x91'}}, {@uid_gt={'uid>', r2}}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) readahead(0xffffffffffffffff, 0x7ff, 0xb43) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:38:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 65) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 23) 18:38:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:01 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 56) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x555, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 41) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 42) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:01 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 57) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 55) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2518.294711] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2518.298407] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 66) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 24) 18:38:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendfile(r1, r0, 0x0, 0x80000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write(r5, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:38:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x600, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 43) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 25) [ 2518.695791] FAULT_INJECTION: forcing a failure. [ 2518.695791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2518.697554] CPU: 1 PID: 12316 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2518.698640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2518.700095] Call Trace: [ 2518.700479] [ 2518.700803] dump_stack_lvl+0x8b/0xb3 [ 2518.701339] should_fail.cold+0x5/0xa [ 2518.701861] copyin+0x19/0x120 [ 2518.702316] copy_page_from_iter_atomic+0x416/0x16b0 [ 2518.703009] ? ext4_da_write_begin+0x63a/0x9a0 [ 2518.703639] ? hash_and_copy_to_iter+0x210/0x210 [ 2518.704295] ? ext4_write_begin+0x1440/0x1440 [ 2518.704946] generic_perform_write+0x2bf/0x570 [ 2518.705589] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2518.706284] ? discard_new_inode+0x190/0x190 [ 2518.706892] ? down_write_killable_nested+0x180/0x180 [ 2518.707603] ext4_buffered_write_iter+0x164/0x460 [ 2518.708271] ext4_file_write_iter+0x3d5/0x1820 [ 2518.708917] ? lock_release+0x750/0x750 [ 2518.709466] ? ext4_file_mmap+0x250/0x250 [ 2518.710036] ? lock_is_held_type+0xd7/0x130 [ 2518.710631] vfs_write+0x9c3/0xd90 [ 2518.711122] ? __ia32_sys_pread64+0x220/0x220 [ 2518.711732] ? __fget_files+0x270/0x450 [ 2518.712285] ksys_write+0x127/0x250 [ 2518.712806] ? __ia32_sys_read+0xb0/0xb0 [ 2518.713367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2518.714074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2518.714791] do_syscall_64+0x3b/0x90 [ 2518.715314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2518.716019] RIP: 0033:0x7f7530800b19 [ 2518.716536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.718918] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2518.719933] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2518.720901] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2518.721846] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.722795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2518.723708] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2518.724673] [ 2518.856639] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 58) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x700, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 44) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 67) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 56) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 26) 18:38:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7f, 0x3, 0xb2, 0x7, 0x0, 0x7, 0x1030, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x1ff, 0xfffffffffffffff8}, 0x4000, 0x3, 0x180, 0x6, 0x1000, 0x81, 0x2, 0x0, 0x43c6, 0x0, 0x1}, r2, 0x7, r0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 2533.741910] FAULT_INJECTION: forcing a failure. [ 2533.741910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.742823] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2533.743396] CPU: 1 PID: 12337 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2533.743945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2533.744713] Call Trace: [ 2533.744911] [ 2533.745073] dump_stack_lvl+0x8b/0xb3 [ 2533.745348] should_fail.cold+0x5/0xa [ 2533.745620] copyin+0x19/0x120 [ 2533.745858] copy_page_from_iter_atomic+0x416/0x16b0 [ 2533.746217] ? ext4_da_write_begin+0x63a/0x9a0 [ 2533.746540] ? hash_and_copy_to_iter+0x210/0x210 [ 2533.746874] ? ext4_write_begin+0x1440/0x1440 [ 2533.747201] generic_perform_write+0x2bf/0x570 [ 2533.747641] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2533.748042] ? discard_new_inode+0x190/0x190 [ 2533.748388] ? down_write_killable_nested+0x180/0x180 [ 2533.748762] ext4_buffered_write_iter+0x164/0x460 [ 2533.749102] ext4_file_write_iter+0x3d5/0x1820 [ 2533.749429] ? lock_release+0x750/0x750 [ 2533.749709] ? ext4_file_mmap+0x250/0x250 [ 2533.750005] ? lock_is_held_type+0xd7/0x130 [ 2533.750313] vfs_write+0x9c3/0xd90 [ 2533.750576] ? __ia32_sys_pread64+0x220/0x220 [ 2533.750916] ? __fget_files+0x270/0x450 [ 2533.751219] ksys_write+0x127/0x250 [ 2533.751505] ? __ia32_sys_read+0xb0/0xb0 [ 2533.751866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2533.752303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2533.752775] do_syscall_64+0x3b/0x90 [ 2533.753104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2533.753465] RIP: 0033:0x7f5a62a86b19 [ 2533.753726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2533.754918] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2533.755430] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2533.755900] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2533.756378] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2533.756864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2533.757340] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2533.757912] 18:38:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 27) 18:38:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 57) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:16 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 45) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 68) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2533.989466] FAULT_INJECTION: forcing a failure. [ 2533.989466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.991104] CPU: 0 PID: 12363 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2533.992181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2533.993663] Call Trace: [ 2533.994014] [ 2533.994326] dump_stack_lvl+0x8b/0xb3 [ 2533.994857] should_fail.cold+0x5/0xa [ 2533.995379] copyin+0x19/0x120 [ 2533.995843] copy_page_from_iter_atomic+0x416/0x16b0 [ 2533.996544] ? ext4_da_write_begin+0x63a/0x9a0 [ 2533.997195] ? hash_and_copy_to_iter+0x210/0x210 [ 2533.997851] ? ext4_write_begin+0x1440/0x1440 [ 2533.998487] generic_perform_write+0x2bf/0x570 [ 2533.999147] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2533.999861] ? discard_new_inode+0x190/0x190 [ 2534.000478] ? down_write_killable_nested+0x180/0x180 [ 2534.001213] ext4_buffered_write_iter+0x164/0x460 [ 2534.001884] ext4_file_write_iter+0x3d5/0x1820 [ 2534.002526] ? lock_release+0x750/0x750 [ 2534.003083] ? ext4_file_mmap+0x250/0x250 [ 2534.003662] ? lock_is_held_type+0xd7/0x130 [ 2534.004271] vfs_write+0x9c3/0xd90 [ 2534.004782] ? __ia32_sys_pread64+0x220/0x220 [ 2534.005410] ? __fget_files+0x270/0x450 [ 2534.005984] ksys_write+0x127/0x250 [ 2534.006486] ? __ia32_sys_read+0xb0/0xb0 [ 2534.007047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.007766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.008506] do_syscall_64+0x3b/0x90 [ 2534.009053] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2534.009776] RIP: 0033:0x7f5758b76b19 [ 2534.010305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.012785] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2534.014019] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2534.014998] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2534.015980] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.016980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2534.017960] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2534.018971] [ 2534.123017] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 69) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002140), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001440)={{0x0, 0x6, 0x1000, 0x7, 0xfff, 0x3, 0x0, 0xeee, 0x4, 0x2, 0x21, 0xfff, 0x5, 0x7, 0xffffffffffff0000}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000014c0)={r9, r10, "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", "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"}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000203fb04189f60a074a155ec08a5e91c6b1b83992835535660a84d9d5fcd04c5aff8ce5af0f64ba09060b1d52742a4203e39257bb78543606e5011a9fdb7a9626709d0f25087ab38cb9aa84123427bf618089634b0c43adba8c98d8ede8c0ccd48b51b8550ab58330e9fa5704db972366ec5dbddb4e9a397b9b08f7a68ae8907a449a7f867c09bf7e0b698e43a9ea2c8c", @ANYRES16=r6, @ANYBLOB="0b0d0000000000000000100000000c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000040)=0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 18:38:32 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 58) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 46) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd00, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 59) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 28) [ 2549.466640] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 29) 18:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 70) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2549.564005] FAULT_INJECTION: forcing a failure. [ 2549.564005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2549.565791] CPU: 1 PID: 12388 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2549.566918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2549.568435] Call Trace: [ 2549.568827] [ 2549.569155] dump_stack_lvl+0x8b/0xb3 [ 2549.569714] should_fail.cold+0x5/0xa [ 2549.570261] copyin+0x19/0x120 [ 2549.570739] copy_page_from_iter_atomic+0x416/0x16b0 [ 2549.571468] ? ext4_da_write_begin+0x63a/0x9a0 [ 2549.572126] ? hash_and_copy_to_iter+0x210/0x210 [ 2549.572821] ? ext4_write_begin+0x1440/0x1440 [ 2549.573488] generic_perform_write+0x2bf/0x570 [ 2549.574171] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2549.574913] ? discard_new_inode+0x190/0x190 [ 2549.575561] ? down_write_killable_nested+0x180/0x180 [ 2549.576302] ext4_buffered_write_iter+0x164/0x460 [ 2549.577031] ext4_file_write_iter+0x3d5/0x1820 [ 2549.577708] ? lock_release+0x750/0x750 [ 2549.578293] ? ext4_file_mmap+0x250/0x250 [ 2549.578921] ? lock_is_held_type+0xd7/0x130 [ 2549.579556] vfs_write+0x9c3/0xd90 [ 2549.580097] ? __ia32_sys_pread64+0x220/0x220 [ 2549.580763] ? __fget_files+0x270/0x450 [ 2549.581393] ksys_write+0x127/0x250 [ 2549.582057] ? __ia32_sys_read+0xb0/0xb0 [ 2549.582648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.583376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.584128] do_syscall_64+0x3b/0x90 [ 2549.584665] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2549.585406] RIP: 0033:0x7f2e40357b19 [ 2549.585946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.588520] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2549.589659] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2549.590639] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2549.591612] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.592585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.593574] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2549.594594] 18:38:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 47) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 71) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2549.744320] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 60) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 30) 18:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 72) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r4}}, './file1\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002880), 0x4000101, 0x7ffffff7) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x0, 0x26, 0x3, 0x0, 0x1fffffffe000000, 0x140a, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x40, 0x1}, 0x400, 0x1000, 0xab2, 0x1, 0x7, 0x81, 0x7, 0x0, 0x81, 0x0, 0x8}, 0xffffffffffffffff, 0x5, r6, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 2549.845823] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1201, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 48) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x8205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:38:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 61) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 73) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 31) 18:38:52 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 59) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2569.368312] FAULT_INJECTION: forcing a failure. [ 2569.368312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2569.369952] CPU: 0 PID: 12439 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2569.371042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2569.372533] Call Trace: [ 2569.372893] [ 2569.373222] dump_stack_lvl+0x8b/0xb3 [ 2569.373752] should_fail.cold+0x5/0xa [ 2569.374272] copyin+0x19/0x120 [ 2569.374735] copy_page_from_iter_atomic+0x416/0x16b0 [ 2569.375437] ? ext4_da_write_begin+0x63a/0x9a0 [ 2569.376064] ? hash_and_copy_to_iter+0x210/0x210 [ 2569.376721] ? ext4_write_begin+0x1440/0x1440 [ 2569.377375] generic_perform_write+0x2bf/0x570 [ 2569.378241] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2569.378976] ? discard_new_inode+0x190/0x190 [ 2569.379587] ? down_write_killable_nested+0x180/0x180 [ 2569.380342] ext4_buffered_write_iter+0x164/0x460 [ 2569.381049] ext4_file_write_iter+0x3d5/0x1820 [ 2569.381709] ? lock_release+0x750/0x750 [ 2569.382285] ? ext4_file_mmap+0x250/0x250 [ 2569.382874] ? lock_is_held_type+0xd7/0x130 [ 2569.383490] vfs_write+0x9c3/0xd90 [ 2569.384001] ? __ia32_sys_pread64+0x220/0x220 [ 2569.384651] ? __fget_files+0x270/0x450 [ 2569.385243] ksys_write+0x127/0x250 [ 2569.385770] ? __ia32_sys_read+0xb0/0xb0 [ 2569.386342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.387074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.387813] do_syscall_64+0x3b/0x90 [ 2569.388343] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2569.389089] RIP: 0033:0x7f7530800b19 [ 2569.389608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.392061] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2569.393105] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2569.394080] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2569.395038] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2569.396003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2569.396971] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2569.397987] [ 2569.420561] FAULT_INJECTION: forcing a failure. [ 2569.420561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2569.422340] CPU: 1 PID: 12448 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2569.423466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2569.424975] Call Trace: [ 2569.425364] [ 2569.425691] dump_stack_lvl+0x8b/0xb3 [ 2569.426241] should_fail.cold+0x5/0xa [ 2569.426788] copyin+0x19/0x120 [ 2569.427261] copy_page_from_iter_atomic+0x416/0x16b0 [ 2569.428024] ? ext4_da_write_begin+0x63a/0x9a0 [ 2569.428687] ? hash_and_copy_to_iter+0x210/0x210 [ 2569.429386] ? ext4_write_begin+0x1440/0x1440 [ 2569.430048] generic_perform_write+0x2bf/0x570 [ 2569.430720] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2569.431449] ? discard_new_inode+0x190/0x190 [ 2569.432075] ? down_write_killable_nested+0x180/0x180 [ 2569.432809] ext4_buffered_write_iter+0x164/0x460 [ 2569.433528] ext4_file_write_iter+0x3d5/0x1820 [ 2569.434215] ? lock_release+0x750/0x750 [ 2569.434787] ? ext4_file_mmap+0x250/0x250 [ 2569.435388] ? lock_is_held_type+0xd7/0x130 [ 2569.436011] vfs_write+0x9c3/0xd90 [ 2569.436530] ? __ia32_sys_pread64+0x220/0x220 [ 2569.437190] ? __fget_files+0x270/0x450 [ 2569.437788] ksys_write+0x127/0x250 [ 2569.438313] ? __ia32_sys_read+0xb0/0xb0 [ 2569.438885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.439618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2569.440355] do_syscall_64+0x3b/0x90 [ 2569.440862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2569.441632] RIP: 0033:0x7f5758b76b19 [ 2569.442156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2569.444601] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2569.445648] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2569.446615] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2569.447582] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2569.448543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2569.449514] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2569.450514] [ 2569.535800] 9pnet: Could not find request transport: 0xffffffffffffffff 18:38:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 62) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:38:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) (fail_nth: 32) 18:38:52 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 60) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 49) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:38:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 74) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:38:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x40000, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3839) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:38:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2400, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:38:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2570.027529] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2570.029357] FAULT_INJECTION: forcing a failure. [ 2570.029357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2570.031304] CPU: 1 PID: 12469 Comm: syz-executor.0 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2570.032405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2570.033913] Call Trace: [ 2570.034266] [ 2570.034579] dump_stack_lvl+0x8b/0xb3 [ 2570.035122] should_fail.cold+0x5/0xa [ 2570.035647] _copy_to_user+0x2a/0x140 [ 2570.036181] simple_read_from_buffer+0xcc/0x160 [ 2570.036822] proc_fail_nth_read+0x198/0x230 [ 2570.037424] ? proc_sessionid_read+0x230/0x230 [ 2570.038047] ? security_file_permission+0xb1/0xe0 [ 2570.038723] vfs_read+0x253/0x930 [ 2570.039228] ? proc_sessionid_read+0x230/0x230 [ 2570.039842] ? kernel_read+0x1c0/0x1c0 [ 2570.040410] ? __fget_files+0x270/0x450 [ 2570.040977] ksys_read+0x127/0x250 [ 2570.041499] ? __ia32_sys_pwrite64+0x220/0x220 [ 2570.042122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.042846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.043567] do_syscall_64+0x3b/0x90 [ 2570.044094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2570.044794] RIP: 0033:0x7fa99c57e69c [ 2570.045330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2570.047698] RSP: 002b:00007fa999b41170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2570.048729] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa99c57e69c [ 2570.049710] RDX: 000000000000000f RSI: 00007fa999b411e0 RDI: 0000000000000004 [ 2570.050678] RBP: 00007fa999b411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2570.051637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.052607] R13: 00007ffe323c96cf R14: 00007fa999b41300 R15: 0000000000022000 [ 2570.053615] 18:39:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 63) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:07 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x1c4, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x40, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x81}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x80}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}], @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x9}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {}, {0x1, 0x1}, {0x7}, {0x6, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7, 0x8000, 0x1, 0x3, 0x4, 0x13, 0x1]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x304, 0x7f, 0x0, 0xfffe, 0x3, 0x200, 0x1000]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x5, 0x9, 0x5, 0x6, 0xc, 0x31, 0xb, 0x1b, 0x60]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x30, 0x48, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x4}, {0x2, 0x5}, {0x6, 0x8}, {}, {0x3}, {0x6, 0x4}, {0x2}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x4, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x4}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x63, 0x0, 0x73, 0x2, 0x8, 0x6, 0x1, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0xc, 0x0, 0x60, 0x1b, 0x6, 0x9, 0x9, 0x1, 0x3, 0x24, 0x12, 0x6, 0x2, 0x6, 0x9, 0x24, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x24, 0xb, 0x6c, 0x1, 0x48, 0x9, 0x58, 0x36, 0xb, 0x1, 0x16, 0x60, 0xb, 0x36, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x101}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x58) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100400018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x4, 0x20, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1000, 0x4, 0x519f, 0x9, 0xe2, 0x5cd, 0x3, 0x0, 0x4817b4d8, 0x0, 0x5}, 0xffffffffffffffff, 0xf, r2, 0x3) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x101482, 0x40) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:39:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 75) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 50) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:07 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 61) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2e00, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:39:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2584.522832] FAULT_INJECTION: forcing a failure. [ 2584.522832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.524486] CPU: 0 PID: 12499 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2584.525582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2584.527062] Call Trace: [ 2584.527414] [ 2584.527726] dump_stack_lvl+0x8b/0xb3 [ 2584.528261] should_fail.cold+0x5/0xa [ 2584.528791] copyin+0x19/0x120 [ 2584.529255] copy_page_from_iter_atomic+0x416/0x16b0 [ 2584.529956] ? ext4_da_write_begin+0x63a/0x9a0 [ 2584.530591] ? hash_and_copy_to_iter+0x210/0x210 [ 2584.531252] ? ext4_write_begin+0x1440/0x1440 [ 2584.531892] generic_perform_write+0x2bf/0x570 [ 2584.532549] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2584.533279] ? discard_new_inode+0x190/0x190 [ 2584.533885] ? down_write_killable_nested+0x180/0x180 [ 2584.534586] ext4_buffered_write_iter+0x164/0x460 [ 2584.535259] ext4_file_write_iter+0x3d5/0x1820 [ 2584.535916] ? lock_release+0x750/0x750 [ 2584.536470] ? ext4_file_mmap+0x250/0x250 [ 2584.537054] ? lock_is_held_type+0xd7/0x130 [ 2584.537674] vfs_write+0x9c3/0xd90 [ 2584.538184] ? __ia32_sys_pread64+0x220/0x220 [ 2584.538816] ? __fget_files+0x270/0x450 [ 2584.539388] ksys_write+0x127/0x250 [ 2584.539900] ? __ia32_sys_read+0xb0/0xb0 [ 2584.540458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.541194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.541926] do_syscall_64+0x3b/0x90 [ 2584.542444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2584.543179] RIP: 0033:0x7f5a62a86b19 [ 2584.543711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.546245] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2584.547333] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2584.548331] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2584.549350] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2584.550379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2584.551372] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2584.552398] 18:39:07 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 62) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:07 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 51) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2584.744782] 9pnet: Could not find request transport: 0xffffffffffffffff 18:39:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:21 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 63) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2ff6, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:39:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3, 0x5, &(0x7f0000000680)=[{&(0x7f0000000380)="5c8fac2c7b636de9251dbcf9630d0fbacfc8da9fd4f9d1ccb691ea0a7cf8caff33c0d445b75b2468707e691f15a8f7e62f5942f9a57612a60f9ba19f87bae6e663029c72bf77a7c201eca3d0a47b39bacdb7e50a4abb188431e5011ce13f807801ba15a380", 0x65, 0x3ff}, {&(0x7f0000000400)="bbbb23f3bf9fd89d3f470764af42d3102f7c7ab493aeb9956b71d4e2038c2f2a6c795400c2327edb4bc14b93d4a789c72c5d2b45539d2769c173683a0917ddc165f6bc74165e68b5ff7c1063b4748a597674648d98d0a9f562d5298bdc32e28ab3a03027953ccbc24f7c98267566e16fc86485348d9cacbd97e547a6ef64fac3102cdeae1bd4399acd42848c77ef11ec72adbff4190335bfb1dfb91f49917373e6a386739bb4a5e9d04d3207eefd1704c6483dc18cf409ff90909ee0f0529096d302fbe8f0df4012cd6684d76069b2db15cd6473a9454011f925989881245bc7e7a55b67bb4e020292219cd688f0d8ff80d976793f6a0a", 0xf7, 0xc33}, {&(0x7f00000001c0)="0f34222b86d924993b655ed7c4d2b4022f907cb7bd516b91c94f67", 0x1b, 0x400}, {&(0x7f0000000500)="0330a6db1f09e772adb90bea0f129654002f1f6020f118eb50970a46f7cad79ace84137fd1eddca82520dc1feaeb9ad47a4e4eb73c4e4b5fde4024b8c0248b828248d94b56bfb5a7ec0a5bb8b0bd147e32d14c3ff8223a7d1008", 0x5a, 0x3}, {&(0x7f0000000580)="0bb3976c788f87b64b11e1a518ee691f513da157aac15c5da7b2b33ee4c296fad169392b1e34622dfeff212dbc63622acfd39388920e09b0e856311059eef6f952029990f805cd2a696cba2691526f5714ccc1df1c880f35b9f2195df8f7c14eb49ad03da128cdc6c5a12c4434089437b170ecb73e58cfecfee8ba4fa250181364db6d48394255462f31164ed00967e3e1fe8c09b9ce7eed6cca9a3289d3755d336311a165f106a47c16ec83640e391a7bd868dd0cadb71629f3c6b7c7f7a09ebc47a49205f334cd8f178247b1df7b1ba49db563a99ba7e01ddc9842", 0xdc, 0xb0d}], 0x5000, &(0x7f0000000780)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x25]}}, {@huge_advise}, {@huge_never}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_always}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x35, 0x30, 0x30, 0x32, 0x34, 0x6b, 0x6d, 0x38]}}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x32, 0x70]}}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@obj_role}, {@measure}, {@fowner_gt={'fowner>', r2}}, {@dont_appraise}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '&[#'}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, ')'}}]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000300)={0xe8d, 0x40, 0x2, 0x80000000, 0x2, [0x7, 0x7, 0x7, 0x3b1a]}) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:39:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 76) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:21 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 52) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2598.136924] loop4: detected capacity change from 0 to 12 [ 2598.139455] FAULT_INJECTION: forcing a failure. [ 2598.139455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.141450] CPU: 0 PID: 12539 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2598.142652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 18:39:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x3, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2598.144249] Call Trace: [ 2598.144750] [ 2598.145106] dump_stack_lvl+0x8b/0xb3 [ 2598.145710] should_fail.cold+0x5/0xa [ 2598.146293] copyin+0x19/0x120 [ 2598.146792] copy_page_from_iter_atomic+0x416/0x16b0 [ 2598.147576] ? ext4_da_write_begin+0x63a/0x9a0 [ 2598.148251] ? hash_and_copy_to_iter+0x210/0x210 [ 2598.148984] ? ext4_write_begin+0x1440/0x1440 [ 2598.149688] generic_perform_write+0x2bf/0x570 [ 2598.150425] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2598.151185] ? discard_new_inode+0x190/0x190 [ 2598.151862] ? down_write_killable_nested+0x180/0x180 [ 2598.152646] ext4_buffered_write_iter+0x164/0x460 [ 2598.153415] ext4_file_write_iter+0x3d5/0x1820 [ 2598.154188] ? lock_release+0x750/0x750 [ 2598.154796] ? ext4_file_mmap+0x250/0x250 [ 2598.155486] ? lock_is_held_type+0xd7/0x130 [ 2598.156157] vfs_write+0x9c3/0xd90 [ 2598.156739] ? __ia32_sys_pread64+0x220/0x220 [ 2598.157447] ? __fget_files+0x270/0x450 [ 2598.158115] ksys_write+0x127/0x250 [ 2598.158673] ? __ia32_sys_read+0xb0/0xb0 [ 2598.159311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.160089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.160941] do_syscall_64+0x3b/0x90 [ 2598.161554] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2598.162365] RIP: 0033:0x7f2e40357b19 [ 2598.162957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.165745] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2598.166911] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2598.168017] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2598.169125] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.170252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.171339] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2598.172462] [ 2598.255808] loop4: detected capacity change from 0 to 12 18:39:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x4, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 53) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:21 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 65) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:21 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2598.429533] FAULT_INJECTION: forcing a failure. [ 2598.429533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.430579] CPU: 1 PID: 12567 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2598.431245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2598.432114] Call Trace: [ 2598.432313] [ 2598.432491] dump_stack_lvl+0x8b/0xb3 [ 2598.432803] should_fail.cold+0x5/0xa [ 2598.433098] copyin+0x19/0x120 [ 2598.433363] copy_page_from_iter_atomic+0x416/0x16b0 [ 2598.433760] ? ext4_da_write_begin+0x63a/0x9a0 [ 2598.434125] ? hash_and_copy_to_iter+0x210/0x210 [ 2598.434498] ? ext4_write_begin+0x1440/0x1440 [ 2598.434874] generic_perform_write+0x2bf/0x570 [ 2598.435254] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2598.435665] ? discard_new_inode+0x190/0x190 [ 2598.436020] ? down_write_killable_nested+0x180/0x180 [ 2598.436429] ext4_buffered_write_iter+0x164/0x460 [ 2598.436825] ext4_file_write_iter+0x3d5/0x1820 [ 2598.437206] ? lock_release+0x750/0x750 [ 2598.437521] ? ext4_file_mmap+0x250/0x250 [ 2598.437857] ? lock_is_held_type+0xd7/0x130 [ 2598.438189] vfs_write+0x9c3/0xd90 [ 2598.438471] ? __ia32_sys_pread64+0x220/0x220 [ 2598.438826] ? __fget_files+0x270/0x450 [ 2598.439165] ksys_write+0x127/0x250 [ 2598.439444] ? __ia32_sys_read+0xb0/0xb0 [ 2598.439774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.440194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.440605] do_syscall_64+0x3b/0x90 [ 2598.440903] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2598.441307] RIP: 0033:0x7f5a62a86b19 [ 2598.441617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.443007] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2598.443608] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2598.444163] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2598.444715] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.445272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.445839] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2598.446409] 18:39:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 77) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x5, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2ff9, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:39:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 78) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 54) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2598.614623] FAULT_INJECTION: forcing a failure. [ 2598.614623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2598.616403] CPU: 0 PID: 12582 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2598.617578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2598.619067] Call Trace: [ 2598.619419] [ 2598.619730] dump_stack_lvl+0x8b/0xb3 [ 2598.620273] should_fail.cold+0x5/0xa [ 2598.620802] copyin+0x19/0x120 [ 2598.621266] copy_page_from_iter_atomic+0x416/0x16b0 [ 2598.621986] ? ext4_da_write_begin+0x63a/0x9a0 [ 2598.622622] ? hash_and_copy_to_iter+0x210/0x210 [ 2598.623274] ? ext4_write_begin+0x1440/0x1440 [ 2598.623915] generic_perform_write+0x2bf/0x570 [ 2598.624559] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2598.625268] ? discard_new_inode+0x190/0x190 [ 2598.625927] ? down_write_killable_nested+0x180/0x180 [ 2598.626714] ext4_buffered_write_iter+0x164/0x460 [ 2598.627502] ext4_file_write_iter+0x3d5/0x1820 [ 2598.628225] ? lock_release+0x750/0x750 [ 2598.628868] ? ext4_file_mmap+0x250/0x250 [ 2598.629538] ? lock_is_held_type+0xd7/0x130 [ 2598.630234] vfs_write+0x9c3/0xd90 [ 2598.630805] ? __ia32_sys_pread64+0x220/0x220 [ 2598.631523] ? __fget_files+0x270/0x450 [ 2598.632155] ksys_write+0x127/0x250 [ 2598.632737] ? __ia32_sys_read+0xb0/0xb0 [ 2598.633370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.634158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.634867] do_syscall_64+0x3b/0x90 [ 2598.635394] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2598.636090] RIP: 0033:0x7f5758b76b19 [ 2598.636616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.638981] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2598.640020] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2598.640991] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2598.641975] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.642951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.644018] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2598.645125] 18:39:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x6, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:39:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 66) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 65) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x7, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 79) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:37 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 55) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:37 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x3, 0x80, 0xeb, 0x45, 0x0, 0x1000, 0x43048, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x4}, 0x305, 0x4, 0x400, 0x4, 0x1, 0x4, 0x1, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000580)={{}, r5, 0x0, @unused=[0x9, 0x7, 0x8, 0x1ff], @devid}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x295}}, './file1\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYBLOB="0162ee8e065978f885d3000000000000943074", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) write(r2, &(0x7f0000000080)="01", 0x41030) setsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000001c0)="46fc6dee6d1016ccfa6ac14c1419156eefeb3f7e2995d1ef92e1cb30ef986c6225ecb999e2301c78832a98abce132c7554e0d6b7be62ee", 0x37) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:39:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x8, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 56) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 66) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:39:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 67) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 80) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x10, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5505, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:39:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x300, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:39:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 57) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 68) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:39:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 81) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:39:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 67) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100478e8027adc4f36f000018000000", @ANYRES32=r1, @ANYBLOB='\x00./file1\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x5, 0x3, 0x69da, 0x80000000}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/workqueue', 0x800, 0x2f1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) recvmsg$unix(r4, &(0x7f0000000540)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/78, 0x4e}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x40002000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) write(r2, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x20, 0x0, 0x287}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000200)) [ 2628.908486] FAULT_INJECTION: forcing a failure. [ 2628.908486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2628.909574] CPU: 0 PID: 12668 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2628.910215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2628.911066] Call Trace: [ 2628.911267] [ 2628.911442] dump_stack_lvl+0x8b/0xb3 [ 2628.911755] should_fail.cold+0x5/0xa [ 2628.912056] copyin+0x19/0x120 [ 2628.912320] copy_page_from_iter_atomic+0x416/0x16b0 [ 2628.912728] ? ext4_da_write_begin+0x63a/0x9a0 [ 2628.913100] ? hash_and_copy_to_iter+0x210/0x210 [ 2628.913473] ? ext4_write_begin+0x1440/0x1440 [ 2628.913872] generic_perform_write+0x2bf/0x570 [ 2628.914253] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2628.914674] ? discard_new_inode+0x190/0x190 [ 2628.915033] ? down_write_killable_nested+0x180/0x180 [ 2628.915442] ext4_buffered_write_iter+0x164/0x460 [ 2628.915835] ext4_file_write_iter+0x3d5/0x1820 [ 2628.916212] ? lock_release+0x750/0x750 [ 2628.916533] ? ext4_file_mmap+0x250/0x250 [ 2628.916875] ? lock_is_held_type+0xd7/0x130 [ 2628.917224] vfs_write+0x9c3/0xd90 [ 2628.917517] ? __ia32_sys_pread64+0x220/0x220 [ 2628.917890] ? __fget_files+0x270/0x450 [ 2628.918215] ksys_write+0x127/0x250 [ 2628.918510] ? __ia32_sys_read+0xb0/0xb0 [ 2628.918832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.919231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.919641] do_syscall_64+0x3b/0x90 [ 2628.919937] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2628.920344] RIP: 0033:0x7f5a62a86b19 [ 2628.920629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.922024] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2628.922601] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2628.923151] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2628.923680] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.924225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.924755] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2628.924813] FAULT_INJECTION: forcing a failure. 18:39:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x500, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2628.924813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2628.925306] [ 2628.927406] CPU: 1 PID: 12671 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2628.928515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2628.930012] Call Trace: [ 2628.930373] [ 2628.930692] dump_stack_lvl+0x8b/0xb3 [ 2628.931232] should_fail.cold+0x5/0xa [ 2628.931766] copyin+0x19/0x120 [ 2628.932240] copy_page_from_iter_atomic+0x416/0x16b0 [ 2628.932949] ? ext4_da_write_begin+0x63a/0x9a0 [ 2628.933601] ? hash_and_copy_to_iter+0x210/0x210 18:39:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x60ff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2628.934284] ? ext4_write_begin+0x1440/0x1440 [ 2628.935049] generic_perform_write+0x2bf/0x570 [ 2628.935737] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2628.936475] ? discard_new_inode+0x190/0x190 [ 2628.937108] ? down_write_killable_nested+0x180/0x180 [ 2628.937859] ext4_buffered_write_iter+0x164/0x460 [ 2628.938560] ext4_file_write_iter+0x3d5/0x1820 [ 2628.939241] ? lock_release+0x750/0x750 [ 2628.939817] ? ext4_file_mmap+0x250/0x250 [ 2628.940431] ? lock_is_held_type+0xd7/0x130 [ 2628.941058] vfs_write+0x9c3/0xd90 [ 2628.941572] ? __ia32_sys_pread64+0x220/0x220 [ 2628.942254] ? __fget_files+0x270/0x450 [ 2628.942844] ksys_write+0x127/0x250 [ 2628.943373] ? __ia32_sys_read+0xb0/0xb0 [ 2628.943958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.944675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.945391] do_syscall_64+0x3b/0x90 [ 2628.945930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2628.946650] RIP: 0033:0x7f5758b76b19 [ 2628.947174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.949590] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2628.950708] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2628.951870] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2628.953023] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.954223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.955385] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2628.956609] 18:39:52 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 58) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:39:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0xfd4fe7f1d9cf7e39, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'lblcr\x00', 0x12, 0xff, 0x3a}, 0x2c) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 18:39:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2629.150268] FAULT_INJECTION: forcing a failure. [ 2629.150268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2629.151923] CPU: 1 PID: 12686 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2629.153015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2629.154501] Call Trace: [ 2629.154859] [ 2629.155179] dump_stack_lvl+0x8b/0xb3 [ 2629.155743] should_fail.cold+0x5/0xa [ 2629.156296] copyin+0x19/0x120 [ 2629.156769] copy_page_from_iter_atomic+0x416/0x16b0 [ 2629.157534] ? ext4_da_write_begin+0x63a/0x9a0 [ 2629.158197] ? hash_and_copy_to_iter+0x210/0x210 [ 2629.158861] ? ext4_write_begin+0x1440/0x1440 [ 2629.159519] generic_perform_write+0x2bf/0x570 [ 2629.160181] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2629.160920] ? discard_new_inode+0x190/0x190 [ 2629.161545] ? down_write_killable_nested+0x180/0x180 [ 2629.162288] ext4_buffered_write_iter+0x164/0x460 [ 2629.162970] ext4_file_write_iter+0x3d5/0x1820 [ 2629.163628] ? lock_release+0x750/0x750 [ 2629.164197] ? ext4_file_mmap+0x250/0x250 [ 2629.164793] ? lock_is_held_type+0xd7/0x130 [ 2629.165407] vfs_write+0x9c3/0xd90 [ 2629.165934] ? __ia32_sys_pread64+0x220/0x220 [ 2629.166576] ? __fget_files+0x270/0x450 [ 2629.167159] ksys_write+0x127/0x250 [ 2629.167674] ? __ia32_sys_read+0xb0/0xb0 [ 2629.168244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.168985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.169758] do_syscall_64+0x3b/0x90 [ 2629.170302] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2629.171051] RIP: 0033:0x7f7530800b19 [ 2629.171580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2629.174123] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2629.175181] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2629.176168] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2629.177153] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2629.178142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2629.179126] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2629.180152] 18:40:05 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 68) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58a6c2ad, 0x0, 0x0, 0x7fe}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:40:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x600, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:05 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 69) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 82) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:40:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x6400, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:40:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 59) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2642.880460] FAULT_INJECTION: forcing a failure. [ 2642.880460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2642.882707] CPU: 0 PID: 12714 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2642.884005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2642.885709] Call Trace: [ 2642.886132] [ 2642.886487] dump_stack_lvl+0x8b/0xb3 [ 2642.887086] should_fail.cold+0x5/0xa [ 2642.887686] copyin+0x19/0x120 [ 2642.888200] copy_page_from_iter_atomic+0x416/0x16b0 [ 2642.888989] ? ext4_da_write_begin+0x63a/0x9a0 [ 2642.889638] ? hash_and_copy_to_iter+0x210/0x210 [ 2642.890391] ? ext4_write_begin+0x1440/0x1440 [ 2642.891125] generic_perform_write+0x2bf/0x570 [ 2642.891779] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2642.892562] ? discard_new_inode+0x190/0x190 [ 2642.893245] ? down_write_killable_nested+0x180/0x180 [ 2642.894092] ext4_buffered_write_iter+0x164/0x460 [ 2642.894887] ext4_file_write_iter+0x3d5/0x1820 [ 2642.895647] ? lock_release+0x750/0x750 [ 2642.896287] ? ext4_file_mmap+0x250/0x250 [ 2642.896950] ? lock_is_held_type+0xd7/0x130 [ 2642.897647] vfs_write+0x9c3/0xd90 [ 2642.898251] ? __ia32_sys_pread64+0x220/0x220 [ 2642.898972] ? __fget_files+0x270/0x450 [ 2642.899644] ksys_write+0x127/0x250 [ 2642.900226] ? __ia32_sys_read+0xb0/0xb0 [ 2642.900861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.901665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2642.902492] do_syscall_64+0x3b/0x90 [ 2642.903091] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2642.903792] RIP: 0033:0x7f2e40357b19 [ 2642.904364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.907008] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2642.908169] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2642.909257] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2642.910309] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.911274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2642.912228] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2642.913214] 18:40:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x700, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 83) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:40:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 60) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2643.167577] FAULT_INJECTION: forcing a failure. [ 2643.167577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2643.169255] CPU: 1 PID: 12734 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2643.170423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2643.171960] Call Trace: [ 2643.172325] [ 2643.172648] dump_stack_lvl+0x8b/0xb3 [ 2643.173208] should_fail.cold+0x5/0xa [ 2643.173755] copyin+0x19/0x120 [ 2643.174252] copy_page_from_iter_atomic+0x416/0x16b0 [ 2643.174986] ? ext4_da_write_begin+0x63a/0x9a0 [ 2643.175643] ? hash_and_copy_to_iter+0x210/0x210 [ 2643.176328] ? ext4_write_begin+0x1440/0x1440 [ 2643.176996] generic_perform_write+0x2bf/0x570 [ 2643.177672] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2643.178434] ? discard_new_inode+0x190/0x190 [ 2643.179064] ? down_write_killable_nested+0x180/0x180 [ 2643.179813] ext4_buffered_write_iter+0x164/0x460 [ 2643.180516] ext4_file_write_iter+0x3d5/0x1820 [ 2643.181191] ? lock_release+0x750/0x750 [ 2643.181771] ? ext4_file_mmap+0x250/0x250 [ 2643.182388] ? lock_is_held_type+0xd7/0x130 [ 2643.183024] vfs_write+0x9c3/0xd90 [ 2643.183558] ? __ia32_sys_pread64+0x220/0x220 [ 2643.184192] ? __fget_files+0x270/0x450 [ 2643.184787] ksys_write+0x127/0x250 [ 2643.185318] ? __ia32_sys_read+0xb0/0xb0 [ 2643.185908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.186643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.187379] do_syscall_64+0x3b/0x90 [ 2643.187912] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2643.188635] RIP: 0033:0x7f5758b76b19 [ 2643.189166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.191641] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2643.192678] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2643.193651] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2643.194635] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.195606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.196580] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2643.197584] 18:40:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xd2a, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 70) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:40:06 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 69) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7e00, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:40:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x1020, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2643.490512] FAULT_INJECTION: forcing a failure. [ 2643.490512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2643.492213] CPU: 0 PID: 12745 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2643.493340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2643.494871] Call Trace: [ 2643.495232] [ 2643.495560] dump_stack_lvl+0x8b/0xb3 [ 2643.496109] should_fail.cold+0x5/0xa [ 2643.496653] copyin+0x19/0x120 [ 2643.497131] copy_page_from_iter_atomic+0x416/0x16b0 [ 2643.497865] ? ext4_da_write_begin+0x63a/0x9a0 [ 2643.498516] ? hash_and_copy_to_iter+0x210/0x210 [ 2643.499194] ? ext4_write_begin+0x1440/0x1440 [ 2643.499852] generic_perform_write+0x2bf/0x570 [ 2643.500518] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2643.501246] ? discard_new_inode+0x190/0x190 [ 2643.501868] ? down_write_killable_nested+0x180/0x180 [ 2643.502605] ext4_buffered_write_iter+0x164/0x460 [ 2643.503295] ext4_file_write_iter+0x3d5/0x1820 [ 2643.503966] ? lock_release+0x750/0x750 [ 2643.504530] ? ext4_file_mmap+0x250/0x250 [ 2643.505136] ? lock_is_held_type+0xd7/0x130 [ 2643.505760] vfs_write+0x9c3/0xd90 [ 2643.506281] ? __ia32_sys_pread64+0x220/0x220 [ 2643.506919] ? __fget_files+0x270/0x450 [ 2643.507503] ksys_write+0x127/0x250 [ 2643.508018] ? __ia32_sys_read+0xb0/0xb0 [ 2643.508586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.509301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.510037] do_syscall_64+0x3b/0x90 [ 2643.510563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2643.511282] RIP: 0033:0x7f5a62a86b19 [ 2643.511804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.514168] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2643.515196] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2643.516141] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2643.517089] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.518043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.518985] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2643.519988] 18:40:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 84) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:40:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x8004, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:40:19 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 70) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r4, 0x6, 0x0) getdents(r4, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0xee) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file1\x00'}) r5 = dup(r3) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r6 = pidfd_getfd(r2, r0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000000)={0x0, 0x8654, 0x2, 0x0, 0x13e, 0x0, r6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000200)) 18:40:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 71) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 61) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2010, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 72) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2a0d, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x8102, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:40:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 62) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) symlinkat(&(0x7f00000001c0)='./file1/../file0\x00', r2, &(0x7f0000000240)='./file1\x00') write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:40:32 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 71) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:32 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 73) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 85) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:40:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x20000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:32 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 72) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2669.734769] FAULT_INJECTION: forcing a failure. [ 2669.734769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2669.736683] CPU: 1 PID: 12822 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2669.737859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2669.739453] Call Trace: [ 2669.739842] [ 2669.740180] dump_stack_lvl+0x8b/0xb3 [ 2669.740758] should_fail.cold+0x5/0xa [ 2669.741329] copyin+0x19/0x120 [ 2669.741837] copy_page_from_iter_atomic+0x416/0x16b0 [ 2669.742624] ? ext4_da_write_begin+0x63a/0x9a0 [ 2669.743312] ? hash_and_copy_to_iter+0x210/0x210 [ 2669.744023] ? ext4_write_begin+0x1440/0x1440 [ 2669.744706] generic_perform_write+0x2bf/0x570 [ 2669.745407] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2669.746200] ? discard_new_inode+0x190/0x190 [ 2669.746870] ? down_write_killable_nested+0x180/0x180 [ 2669.747662] ext4_buffered_write_iter+0x164/0x460 [ 2669.748402] ext4_file_write_iter+0x3d5/0x1820 [ 2669.749116] ? lock_release+0x750/0x750 [ 2669.749729] ? ext4_file_mmap+0x250/0x250 [ 2669.750392] ? lock_is_held_type+0xd7/0x130 [ 2669.751051] vfs_write+0x9c3/0xd90 [ 2669.751610] ? __ia32_sys_pread64+0x220/0x220 [ 2669.752302] ? __fget_files+0x270/0x450 [ 2669.752933] ksys_write+0x127/0x250 [ 2669.753495] ? __ia32_sys_read+0xb0/0xb0 [ 2669.754110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.754889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.755672] do_syscall_64+0x3b/0x90 [ 2669.756240] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2669.757016] RIP: 0033:0x7f5a62a86b19 [ 2669.757578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.760198] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2669.761304] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2669.762371] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2669.763363] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2669.764374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2669.765363] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2669.766442] 18:40:32 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 63) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x80000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 86) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:40:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(r0, 0x406, r3) r4 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x9}}, './file1\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'wlan1\x00'}) [ 2669.918731] FAULT_INJECTION: forcing a failure. [ 2669.918731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2669.920415] CPU: 1 PID: 12840 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2669.921503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2669.923028] Call Trace: [ 2669.923394] [ 2669.923714] dump_stack_lvl+0x8b/0xb3 [ 2669.924267] should_fail.cold+0x5/0xa [ 2669.924814] copyin+0x19/0x120 [ 2669.925289] copy_page_from_iter_atomic+0x416/0x16b0 [ 2669.926013] ? ext4_da_write_begin+0x63a/0x9a0 [ 2669.926689] ? hash_and_copy_to_iter+0x210/0x210 [ 2669.927369] ? ext4_write_begin+0x1440/0x1440 [ 2669.928026] generic_perform_write+0x2bf/0x570 [ 2669.928704] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2669.929415] ? discard_new_inode+0x190/0x190 [ 2669.930047] ? down_write_killable_nested+0x180/0x180 [ 2669.930769] ext4_buffered_write_iter+0x164/0x460 [ 2669.931438] ext4_file_write_iter+0x3d5/0x1820 [ 2669.932092] ? lock_release+0x750/0x750 [ 2669.932645] ? ext4_file_mmap+0x250/0x250 [ 2669.933232] ? lock_is_held_type+0xd7/0x130 [ 2669.933829] vfs_write+0x9c3/0xd90 [ 2669.934363] ? __ia32_sys_pread64+0x220/0x220 [ 2669.934998] ? __fget_files+0x270/0x450 [ 2669.935575] ksys_write+0x127/0x250 [ 2669.936096] ? __ia32_sys_read+0xb0/0xb0 [ 2669.936662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.937361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.938076] do_syscall_64+0x3b/0x90 [ 2669.938620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2669.939327] RIP: 0033:0x7f7530800b19 [ 2669.939841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.942252] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2669.943286] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2669.944250] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2669.945201] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2669.946186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2669.947175] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2669.948202] 18:40:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xe0ffff, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:40:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x506, 0x3, &(0x7f0000000500)=[{&(0x7f0000000380)="5241157502c17878a1a08d0a3018829945cb94161ac921b174af2bd38f72d8a4625f0f0b109cec759b0395852d579a48aeb773665272d8d639902cc9dad2511e95496fbe473d34b0b783a14ec30a2d2294cbed47de79f37b5137ad40a419f93c4c976107800d1e", 0x67, 0x4}, {&(0x7f00000001c0)="e528033831898e6ecbc69a0845e5e34cc1e878431eebf210774fdb12d578d2d4ae1e385732b041bb56b0dcb74d", 0x2d, 0xcf0}, {&(0x7f0000000400)="1c9225184f824fc9c750edac86125aa93f196412fba1b8327b3c8ff3530b094a9a7babd92fe8b5a01339c93f070e97486387a10692fd9b3ac23f9fd8f53ff2724f19f34bda1a9554b737342974215d084711be45cb6d82d7fbb586f1fa8a553f826c7bcfab19f514ea099fe59db11eb6c64298b80a5200e1f2e00d1165ccfd28cd643f92415bc8191f83e4e158f582ab7194e6a9e6245124cc58a0a28bed0dca1253ed9cf5b00b006afb922f3d4f2f0e7dd001b2101b56ce996cabe19fb06084df443a2bdeebc95caa1dd83846965661c1c0f7afe91756", 0xd7, 0x91}], 0x10000c0, &(0x7f0000000240)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x25]}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) mmap$perf(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x10, r1, 0xced) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='ramfs\x00', 0x200004, &(0x7f0000000600)='!:*-&*%#&-\x00') 18:40:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 74) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 87) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:40:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:40:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 64) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 73) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2682.354428] loop4: detected capacity change from 0 to 12 [ 2682.360870] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 18:40:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:40:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 65) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:40:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 88) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2682.447486] FAULT_INJECTION: forcing a failure. [ 2682.447486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2682.449305] CPU: 1 PID: 12870 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2682.450510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2682.452121] Call Trace: [ 2682.452506] [ 2682.452850] dump_stack_lvl+0x8b/0xb3 [ 2682.453433] should_fail.cold+0x5/0xa [ 2682.454018] copyin+0x19/0x120 [ 2682.454530] copy_page_from_iter_atomic+0x416/0x16b0 [ 2682.455317] ? ext4_da_write_begin+0x63a/0x9a0 [ 2682.456023] ? hash_and_copy_to_iter+0x210/0x210 [ 2682.456761] ? ext4_write_begin+0x1440/0x1440 [ 2682.457474] generic_perform_write+0x2bf/0x570 [ 2682.458189] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2682.458989] ? discard_new_inode+0x190/0x190 [ 2682.459676] ? down_write_killable_nested+0x180/0x180 [ 2682.460499] ext4_buffered_write_iter+0x164/0x460 [ 2682.461258] ext4_file_write_iter+0x3d5/0x1820 [ 2682.461993] ? lock_release+0x750/0x750 [ 2682.462639] ? ext4_file_mmap+0x250/0x250 [ 2682.463290] ? lock_is_held_type+0xd7/0x130 [ 2682.463974] vfs_write+0x9c3/0xd90 [ 2682.464536] ? __ia32_sys_pread64+0x220/0x220 [ 2682.465241] ? __fget_files+0x270/0x450 [ 2682.465884] ksys_write+0x127/0x250 [ 2682.466462] ? __ia32_sys_read+0xb0/0xb0 [ 2682.467099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.467888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.468699] do_syscall_64+0x3b/0x90 [ 2682.469269] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2682.470055] RIP: 0033:0x7f2e40357b19 [ 2682.470649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2682.473265] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2682.474423] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2682.475477] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2682.476538] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2682.477585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2682.478604] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2682.479640] 18:40:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 75) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2682.502488] FAULT_INJECTION: forcing a failure. [ 2682.502488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2682.503543] CPU: 0 PID: 12880 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2682.504167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2682.505036] Call Trace: [ 2682.505249] [ 2682.505426] dump_stack_lvl+0x8b/0xb3 [ 2682.505744] should_fail.cold+0x5/0xa [ 2682.506058] copyin+0x19/0x120 [ 2682.506327] copy_page_from_iter_atomic+0x416/0x16b0 [ 2682.506736] ? ext4_da_write_begin+0x63a/0x9a0 [ 2682.507109] ? hash_and_copy_to_iter+0x210/0x210 [ 2682.507495] ? ext4_write_begin+0x1440/0x1440 [ 2682.507861] generic_perform_write+0x2bf/0x570 [ 2682.508252] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2682.508666] ? discard_new_inode+0x190/0x190 [ 2682.509017] ? down_write_killable_nested+0x180/0x180 [ 2682.509445] ext4_buffered_write_iter+0x164/0x460 [ 2682.509834] ext4_file_write_iter+0x3d5/0x1820 [ 2682.510207] ? lock_release+0x750/0x750 [ 2682.510546] ? ext4_file_mmap+0x250/0x250 [ 2682.510875] ? lock_is_held_type+0xd7/0x130 [ 2682.511229] vfs_write+0x9c3/0xd90 [ 2682.511523] ? __ia32_sys_pread64+0x220/0x220 [ 2682.511881] ? __fget_files+0x270/0x450 [ 2682.512222] ksys_write+0x127/0x250 [ 2682.512506] ? __ia32_sys_read+0xb0/0xb0 [ 2682.512823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.513222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.513622] do_syscall_64+0x3b/0x90 [ 2682.513917] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2682.514335] RIP: 0033:0x7f5758b76b19 [ 2682.514619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2682.515960] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2682.516530] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2682.517064] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2682.517594] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2682.518123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2682.518666] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2682.519222] 18:40:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2682.562387] loop4: detected capacity change from 0 to 12 [ 2682.568277] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 18:40:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2682.629955] FAULT_INJECTION: forcing a failure. [ 2682.629955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2682.632300] CPU: 1 PID: 12886 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2682.633699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2682.635447] Call Trace: [ 2682.635850] [ 2682.636220] dump_stack_lvl+0x8b/0xb3 [ 2682.636851] should_fail.cold+0x5/0xa [ 2682.637469] copyin+0x19/0x120 [ 2682.638006] copy_page_from_iter_atomic+0x416/0x16b0 [ 2682.638842] ? ext4_da_write_begin+0x63a/0x9a0 [ 2682.639588] ? hash_and_copy_to_iter+0x210/0x210 [ 2682.640358] ? ext4_write_begin+0x1440/0x1440 [ 2682.641084] generic_perform_write+0x2bf/0x570 [ 2682.641823] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2682.642650] ? discard_new_inode+0x190/0x190 [ 2682.643355] ? down_write_killable_nested+0x180/0x180 [ 2682.644167] ext4_buffered_write_iter+0x164/0x460 [ 2682.644930] ext4_file_write_iter+0x3d5/0x1820 [ 2682.645669] ? lock_release+0x750/0x750 [ 2682.646302] ? ext4_file_mmap+0x250/0x250 [ 2682.646967] ? lock_is_held_type+0xd7/0x130 [ 2682.647657] vfs_write+0x9c3/0xd90 [ 2682.648247] ? __ia32_sys_pread64+0x220/0x220 [ 2682.648947] ? __fget_files+0x270/0x450 [ 2682.649590] ksys_write+0x127/0x250 [ 2682.650171] ? __ia32_sys_read+0xb0/0xb0 [ 2682.650803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.651594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2682.652404] do_syscall_64+0x3b/0x90 [ 2682.652997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2682.653797] RIP: 0033:0x7f5a62a86b19 [ 2682.654394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2682.657123] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2682.658305] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2682.659401] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2682.660495] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2682.661589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2682.662688] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2682.663831] 18:41:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 76) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f6465762f6e626430004db05db76737b048c0b860861cfd74305dcae94d6e7c8f7c07844fd9368dd3aaba91eabab5ccce4c232dc106b94daf623bbcbd500c74637c51e8f0e460d13d043ef129b2a39e87cc801bf9f8e4b154e30c6187460df9624a9bfab8d359bffc3ab8d440fef125cc40fe2f138c830a39f99ad3fddc722836c32d083ebda50fec00b09ecf5a8a519b33102c9dc50891b5169327c7eca5985dc89f63c7c58b3f39337d7ea68778d944c6ad6567f4e759f044c920db5704bc94ecfb8947993900da00de075233969000f7150b"], &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='pstore\x00', 0x20, &(0x7f0000000240)='(\xf9(\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r2 = dup(r1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) 18:41:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 89) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:41:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 74) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 66) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2697.257837] FAULT_INJECTION: forcing a failure. [ 2697.257837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2697.259670] CPU: 1 PID: 12912 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2697.260888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2697.262472] Call Trace: [ 2697.262829] [ 2697.263147] dump_stack_lvl+0x8b/0xb3 [ 2697.263684] should_fail.cold+0x5/0xa [ 2697.264221] copyin+0x19/0x120 [ 2697.264682] copy_page_from_iter_atomic+0x416/0x16b0 [ 2697.265388] ? ext4_da_write_begin+0x63a/0x9a0 [ 2697.266019] ? hash_and_copy_to_iter+0x210/0x210 [ 2697.266721] ? ext4_write_begin+0x1440/0x1440 [ 2697.267355] generic_perform_write+0x2bf/0x570 [ 2697.267993] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2697.268691] ? discard_new_inode+0x190/0x190 [ 2697.269329] ? down_write_killable_nested+0x180/0x180 [ 2697.270131] ext4_buffered_write_iter+0x164/0x460 [ 2697.270806] ext4_file_write_iter+0x3d5/0x1820 [ 2697.271443] ? lock_release+0x750/0x750 [ 2697.271993] ? ext4_file_mmap+0x250/0x250 [ 2697.272613] ? lock_is_held_type+0xd7/0x130 [ 2697.273214] vfs_write+0x9c3/0xd90 [ 2697.273712] ? __ia32_sys_pread64+0x220/0x220 [ 2697.274329] ? __fget_files+0x270/0x450 [ 2697.274998] ksys_write+0x127/0x250 [ 2697.275508] ? __ia32_sys_read+0xb0/0xb0 [ 2697.276078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2697.276823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2697.277530] do_syscall_64+0x3b/0x90 [ 2697.278051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2697.278763] RIP: 0033:0x7f2e40357b19 [ 2697.279257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2697.281572] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2697.282573] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2697.283495] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2697.284423] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2697.285345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2697.286268] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2697.287232] 18:41:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 77) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 67) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000010, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) statx(r0, &(0x7f0000000240)='./file1\x00', 0x1000, 0x7ff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000380)="4213c8cd8f33627c586d6e4440f81cbda3f2d3923820ed641d73374ea0ce04f9ee35dfa076d271d33d7eff2095864a93189c37393c64b2c4f3f9a716c3b505de6ec4f3e5f2b19fcc8f07863537a4d3a80d288b50cdf5a47ee4eab6a8f49a77e8dd7b2c52affef707e76e5244ce808c2880691fa2f80676e6f50b9e40606b47597c29f880e69d0b8667a9a081f9d32615816520e8d36e2692ad3906650bbcdfcc8cb2bd19c32f46934fbe2ec7b80c4428b2baf34bc95c55b0a5e5596e37ca808bb53685db6f3c2f2ed1617939b6f3fc6de74b5c434d8619158619702f421aac5458e74e0471d57b29e64d4ceb28fe6b62", 0xf0, 0xfffffffffffffff8}, {&(0x7f0000000480)="ffa2f3cfd94a17b6fd6f0d2108f08736d2e91bab3d2eb5c34bc5dddc9b9d6a8bdae3bc776d0ed8872ef780f03f7e73a0e1d5820eb406788de7b167ada13e885a9535b9842bbe879eb4a383d6634c8b026f115373fdd573ffb1bc8517e1a2bdfe2b2b0bd4e6945c3be0be704b082e7cc07b581b1473dde7e5646cf833d6fed82e94bb180dd6b83a42f54fb642cfb90d", 0x8f, 0x1}], 0x8208, &(0x7f0000000740)=ANY=[@ANYBLOB="6d706f6c3d62696e643d72656c61746976653a2c393436042c7569643dc36f1ffe69", @ANYRESHEX=r1, @ANYBLOB=',gid=', @ANYRESHEX=r2, @ANYBLOB="2c6d6f64653d3030303030303030303030303030303030ab30303031312c73697a653d36747074352c687567653d6164766973652c6673636f6e746578743d756e636f6e66696e65645f752c646f6e745f61707072616973652c00"]) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:41:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf62f, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:41:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 90) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:41:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 78) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 68) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 75) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2697.629907] FAULT_INJECTION: forcing a failure. [ 2697.629907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2697.631004] CPU: 0 PID: 12946 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2697.631652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2697.632524] Call Trace: [ 2697.632734] [ 2697.632913] dump_stack_lvl+0x8b/0xb3 [ 2697.633230] should_fail.cold+0x5/0xa [ 2697.633533] copyin+0x19/0x120 [ 2697.633811] copy_page_from_iter_atomic+0x416/0x16b0 [ 2697.634225] ? ext4_da_write_begin+0x63a/0x9a0 [ 2697.634597] ? hash_and_copy_to_iter+0x210/0x210 [ 2697.634981] ? ext4_write_begin+0x1440/0x1440 [ 2697.635356] generic_perform_write+0x2bf/0x570 [ 2697.635736] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2697.636157] ? discard_new_inode+0x190/0x190 [ 2697.636509] ? down_write_killable_nested+0x180/0x180 [ 2697.636931] ext4_buffered_write_iter+0x164/0x460 [ 2697.637323] ext4_file_write_iter+0x3d5/0x1820 [ 2697.637703] ? lock_release+0x750/0x750 [ 2697.638030] ? ext4_file_mmap+0x250/0x250 [ 2697.638372] ? lock_is_held_type+0xd7/0x130 [ 2697.638733] vfs_write+0x9c3/0xd90 [ 2697.639021] ? __ia32_sys_pread64+0x220/0x220 [ 2697.639378] ? __fget_files+0x270/0x450 [ 2697.639702] ksys_write+0x127/0x250 [ 2697.639988] ? __ia32_sys_read+0xb0/0xb0 [ 2697.640323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2697.640723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2697.641128] do_syscall_64+0x3b/0x90 [ 2697.641418] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2697.641818] RIP: 0033:0x7f5a62a86b19 [ 2697.642106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2697.643458] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2697.644025] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2697.644557] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2697.645089] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2697.645621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2697.646159] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2697.646718] 18:41:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2697.782451] loop4: detected capacity change from 0 to 16383 18:41:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 69) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2697.881103] loop4: detected capacity change from 0 to 16383 [ 2697.993711] FAULT_INJECTION: forcing a failure. [ 2697.993711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2697.995521] CPU: 1 PID: 12967 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2697.996626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2697.998109] Call Trace: [ 2697.998488] [ 2697.998805] dump_stack_lvl+0x8b/0xb3 [ 2697.999345] should_fail.cold+0x5/0xa [ 2697.999880] copyin+0x19/0x120 [ 2698.000342] copy_page_from_iter_atomic+0x416/0x16b0 [ 2698.001047] ? ext4_da_write_begin+0x63a/0x9a0 [ 2698.001692] ? hash_and_copy_to_iter+0x210/0x210 [ 2698.002353] ? ext4_write_begin+0x1440/0x1440 [ 2698.003003] generic_perform_write+0x2bf/0x570 [ 2698.003668] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2698.004411] ? discard_new_inode+0x190/0x190 [ 2698.005043] ? down_write_killable_nested+0x180/0x180 [ 2698.005775] ext4_buffered_write_iter+0x164/0x460 [ 2698.006496] ext4_file_write_iter+0x3d5/0x1820 [ 2698.007177] ? lock_release+0x750/0x750 [ 2698.007753] ? ext4_file_mmap+0x250/0x250 [ 2698.008376] ? lock_is_held_type+0xd7/0x130 [ 2698.009010] vfs_write+0x9c3/0xd90 [ 2698.009541] ? __ia32_sys_pread64+0x220/0x220 [ 2698.010199] ? __fget_files+0x270/0x450 [ 2698.010812] ksys_write+0x127/0x250 [ 2698.011348] ? __ia32_sys_read+0xb0/0xb0 [ 2698.011934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2698.012654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2698.013398] do_syscall_64+0x3b/0x90 [ 2698.013941] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2698.014689] RIP: 0033:0x7f7530800b19 [ 2698.015219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2698.017705] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2698.018774] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2698.019754] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2698.020728] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2698.021714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2698.022713] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2698.023730] 18:41:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 70) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 91) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:41:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf92f, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:41:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:15 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 76) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x8002, 0x9f, 0x2}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x5aca, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x136}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:41:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 79) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:15 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 77) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2712.145925] FAULT_INJECTION: forcing a failure. [ 2712.145925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2712.147923] CPU: 1 PID: 12992 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2712.149237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2712.150977] Call Trace: [ 2712.151400] [ 2712.151770] dump_stack_lvl+0x8b/0xb3 [ 2712.152408] should_fail.cold+0x5/0xa [ 2712.153030] copyin+0x19/0x120 [ 2712.153579] copy_page_from_iter_atomic+0x416/0x16b0 [ 2712.154403] ? ext4_da_write_begin+0x63a/0x9a0 [ 2712.155161] ? hash_and_copy_to_iter+0x210/0x210 [ 2712.155935] ? ext4_write_begin+0x1440/0x1440 [ 2712.156703] generic_perform_write+0x2bf/0x570 [ 2712.157458] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2712.158286] ? discard_new_inode+0x190/0x190 [ 2712.159033] ? down_write_killable_nested+0x180/0x180 [ 2712.159867] ext4_buffered_write_iter+0x164/0x460 [ 2712.160648] ext4_file_write_iter+0x3d5/0x1820 [ 2712.161484] ? lock_release+0x750/0x750 [ 2712.162223] ? ext4_file_mmap+0x250/0x250 [ 2712.162938] ? lock_is_held_type+0xd7/0x130 [ 2712.163640] vfs_write+0x9c3/0xd90 [ 2712.164231] ? __ia32_sys_pread64+0x220/0x220 [ 2712.164980] ? __fget_files+0x270/0x450 [ 2712.165657] ksys_write+0x127/0x250 [ 2712.166248] ? __ia32_sys_read+0xb0/0xb0 [ 2712.166927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.167756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.168600] do_syscall_64+0x3b/0x90 [ 2712.169207] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2712.170035] RIP: 0033:0x7f5a62a86b19 [ 2712.170652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.173452] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2712.174644] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2712.175740] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2712.176834] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2712.177937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2712.179070] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2712.180199] 18:41:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 71) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x9, 0x5, 0x8, 0xff, 0x0, 0x6, 0x4000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7fff, 0x1}, 0x910c, 0x9, 0x3, 0x2, 0x1, 0x4a, 0x3, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x6, 0x5, 0x0, 0x80, 0x20458, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x6, 0x4}, 0x3000, 0x5b2, 0x151, 0x6, 0xfff, 0x4, 0x2f1, 0x0, 0x8225, 0x0, 0x1400000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:41:15 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 78) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 72) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 92) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2712.503488] 9pnet: Could not find request transport: 0xffffffffffffffff 18:41:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xff01, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:41:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x21, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000001c0)={0x0, 0x100000, 0x100000, {r0}}, 0x20) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) openat(r2, &(0x7f0000000000)='./file1\x00', 0xe0000, 0x40) 18:41:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 73) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2712.791143] FAULT_INJECTION: forcing a failure. [ 2712.791143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2712.792894] CPU: 0 PID: 13037 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2712.794012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2712.795510] Call Trace: [ 2712.795859] [ 2712.796183] dump_stack_lvl+0x8b/0xb3 [ 2712.796708] should_fail.cold+0x5/0xa [ 2712.797238] copyin+0x19/0x120 [ 2712.797705] copy_page_from_iter_atomic+0x416/0x16b0 [ 2712.798416] ? ext4_da_write_begin+0x63a/0x9a0 [ 2712.799075] ? hash_and_copy_to_iter+0x210/0x210 [ 2712.799734] ? ext4_write_begin+0x1440/0x1440 [ 2712.800387] generic_perform_write+0x2bf/0x570 [ 2712.801024] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2712.801728] ? discard_new_inode+0x190/0x190 [ 2712.802329] ? down_write_killable_nested+0x180/0x180 [ 2712.803047] ext4_buffered_write_iter+0x164/0x460 [ 2712.803706] ext4_file_write_iter+0x3d5/0x1820 [ 2712.804368] ? lock_release+0x750/0x750 [ 2712.804922] ? ext4_file_mmap+0x250/0x250 [ 2712.805511] ? lock_is_held_type+0xd7/0x130 [ 2712.806104] vfs_write+0x9c3/0xd90 [ 2712.806602] ? __ia32_sys_pread64+0x220/0x220 [ 2712.807248] ? __fget_files+0x270/0x450 [ 2712.807832] ksys_write+0x127/0x250 [ 2712.808355] ? __ia32_sys_read+0xb0/0xb0 [ 2712.808926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.809645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2712.810448] do_syscall_64+0x3b/0x90 [ 2712.811238] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2712.811965] RIP: 0033:0x7f7530800b19 [ 2712.812486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2712.814960] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2712.816000] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2712.816929] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2712.817889] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2712.818859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2712.819815] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2712.820822] [ 2712.859460] 9pnet: Could not find request transport: 0xffffffffffffffff 18:41:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 80) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 74) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:41:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 93) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:41:30 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 79) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2a0d0000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7b43, &(0x7f0000000380)={0x0, 0xec6c, 0x1, 0x1, 0x29d, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 2727.073177] FAULT_INJECTION: forcing a failure. [ 2727.073177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2727.075031] CPU: 0 PID: 13058 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2727.076183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2727.077752] Call Trace: [ 2727.078126] [ 2727.078456] dump_stack_lvl+0x8b/0xb3 [ 2727.079046] should_fail.cold+0x5/0xa [ 2727.079615] copyin+0x19/0x120 [ 2727.080105] copy_page_from_iter_atomic+0x416/0x16b0 [ 2727.080852] ? ext4_da_write_begin+0x63a/0x9a0 [ 2727.081542] ? hash_and_copy_to_iter+0x210/0x210 [ 2727.082252] ? ext4_write_begin+0x1440/0x1440 [ 2727.082967] generic_perform_write+0x2bf/0x570 [ 2727.083678] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2727.084447] ? discard_new_inode+0x190/0x190 [ 2727.085120] ? down_write_killable_nested+0x180/0x180 [ 2727.085900] ext4_buffered_write_iter+0x164/0x460 [ 2727.086631] ext4_file_write_iter+0x3d5/0x1820 [ 2727.087361] ? lock_release+0x750/0x750 [ 2727.087966] ? ext4_file_mmap+0x250/0x250 [ 2727.088611] ? lock_is_held_type+0xd7/0x130 [ 2727.089274] vfs_write+0x9c3/0xd90 [ 2727.089819] ? __ia32_sys_pread64+0x220/0x220 [ 2727.090506] ? __fget_files+0x270/0x450 [ 2727.091137] ksys_write+0x127/0x250 [ 2727.091702] ? __ia32_sys_read+0xb0/0xb0 [ 2727.092314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.093081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.093872] do_syscall_64+0x3b/0x90 [ 2727.094433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2727.095210] RIP: 0033:0x7f5758b76b19 [ 2727.095762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.098374] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2727.099493] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2727.100533] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2727.101560] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.102624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2727.103667] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2727.104740] [ 2727.122316] FAULT_INJECTION: forcing a failure. [ 2727.122316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2727.124200] CPU: 0 PID: 13054 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2727.125392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2727.126992] Call Trace: [ 2727.127379] [ 2727.127718] dump_stack_lvl+0x8b/0xb3 [ 2727.128299] should_fail.cold+0x5/0xa [ 2727.128874] copyin+0x19/0x120 [ 2727.129378] copy_page_from_iter_atomic+0x416/0x16b0 [ 2727.130140] ? ext4_da_write_begin+0x63a/0x9a0 [ 2727.130843] ? hash_and_copy_to_iter+0x210/0x210 [ 2727.131565] ? ext4_write_begin+0x1440/0x1440 [ 2727.132256] generic_perform_write+0x2bf/0x570 [ 2727.132966] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2727.133740] ? discard_new_inode+0x190/0x190 [ 2727.134407] ? down_write_killable_nested+0x180/0x180 [ 2727.135222] ext4_buffered_write_iter+0x164/0x460 [ 2727.135959] ext4_file_write_iter+0x3d5/0x1820 [ 2727.136668] ? lock_release+0x750/0x750 [ 2727.137279] ? ext4_file_mmap+0x250/0x250 [ 2727.137924] ? lock_is_held_type+0xd7/0x130 [ 2727.138602] vfs_write+0x9c3/0xd90 [ 2727.139175] ? __ia32_sys_pread64+0x220/0x220 [ 2727.139864] ? __fget_files+0x270/0x450 [ 2727.140493] ksys_write+0x127/0x250 [ 2727.141051] ? __ia32_sys_read+0xb0/0xb0 [ 2727.141660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.142437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.143247] do_syscall_64+0x3b/0x90 [ 2727.143821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2727.144590] RIP: 0033:0x7f2e40357b19 [ 2727.145158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.147803] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2727.148909] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2727.149945] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2727.150993] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.152036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2727.153065] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2727.154133] 18:41:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:30 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 94) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:41:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) syz_io_uring_setup(0x49ad, &(0x7f0000000000)={0x0, 0x1534, 0x0, 0x2, 0x325, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) 18:41:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:41:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 75) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 81) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:44 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2741.802674] FAULT_INJECTION: forcing a failure. [ 2741.802674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2741.804464] CPU: 0 PID: 13101 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2741.805675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2741.807337] Call Trace: [ 2741.807728] [ 2741.808072] dump_stack_lvl+0x8b/0xb3 [ 2741.808650] should_fail.cold+0x5/0xa [ 2741.809222] copyin+0x19/0x120 [ 2741.809723] copy_page_from_iter_atomic+0x416/0x16b0 [ 2741.810507] ? ext4_da_write_begin+0x63a/0x9a0 [ 2741.811212] ? hash_and_copy_to_iter+0x210/0x210 [ 2741.811930] ? ext4_write_begin+0x1440/0x1440 [ 2741.812623] generic_perform_write+0x2bf/0x570 [ 2741.813337] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2741.814109] ? discard_new_inode+0x190/0x190 [ 2741.814788] ? down_write_killable_nested+0x180/0x180 [ 2741.815590] ext4_buffered_write_iter+0x164/0x460 [ 2741.816354] ext4_file_write_iter+0x3d5/0x1820 [ 2741.817094] ? lock_release+0x750/0x750 [ 2741.817729] ? ext4_file_mmap+0x250/0x250 [ 2741.818386] ? lock_is_held_type+0xd7/0x130 [ 2741.819094] vfs_write+0x9c3/0xd90 [ 2741.819665] ? __ia32_sys_pread64+0x220/0x220 [ 2741.820376] ? __fget_files+0x270/0x450 [ 2741.821035] ksys_write+0x127/0x250 [ 2741.821604] ? __ia32_sys_read+0xb0/0xb0 [ 2741.822234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.823058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.823874] do_syscall_64+0x3b/0x90 [ 2741.824457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2741.825259] RIP: 0033:0x7f5758b76b19 [ 2741.825828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.828544] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2741.829692] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2741.830770] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2741.832007] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.833084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.834160] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2741.835300] 18:41:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 76) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 82) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 81) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:41:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:41:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xffffe000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:41:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 95) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 96) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 77) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) openat(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x18000, 0x107) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/3\x00') 18:42:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 83) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 82) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2757.173274] FAULT_INJECTION: forcing a failure. [ 2757.173274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2757.174332] CPU: 1 PID: 13145 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2757.174969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2757.175834] Call Trace: [ 2757.176040] [ 2757.176220] dump_stack_lvl+0x8b/0xb3 [ 2757.176529] should_fail.cold+0x5/0xa [ 2757.176840] copyin+0x19/0x120 [ 2757.177107] copy_page_from_iter_atomic+0x416/0x16b0 [ 2757.177524] ? ext4_da_write_begin+0x63a/0x9a0 [ 2757.177893] ? hash_and_copy_to_iter+0x210/0x210 [ 2757.178275] ? ext4_write_begin+0x1440/0x1440 [ 2757.178642] generic_perform_write+0x2bf/0x570 [ 2757.179028] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2757.179451] ? discard_new_inode+0x190/0x190 [ 2757.179802] ? down_write_killable_nested+0x180/0x180 [ 2757.180211] ext4_buffered_write_iter+0x164/0x460 [ 2757.180599] ext4_file_write_iter+0x3d5/0x1820 [ 2757.180971] ? lock_release+0x750/0x750 [ 2757.181294] ? ext4_file_mmap+0x250/0x250 [ 2757.181633] ? lock_is_held_type+0xd7/0x130 [ 2757.181981] vfs_write+0x9c3/0xd90 [ 2757.182276] ? __ia32_sys_pread64+0x220/0x220 [ 2757.182636] ? __fget_files+0x270/0x450 [ 2757.182971] ksys_write+0x127/0x250 [ 2757.183267] ? __ia32_sys_read+0xb0/0xb0 [ 2757.183586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.183990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.184401] do_syscall_64+0x3b/0x90 [ 2757.184700] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2757.185103] RIP: 0033:0x7f5a62a86b19 [ 2757.185390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.186760] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2757.187342] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2757.187896] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2757.188440] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.188997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.189551] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2757.190122] 18:42:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 78) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 97) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 84) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2757.404268] FAULT_INJECTION: forcing a failure. [ 2757.404268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2757.405409] CPU: 1 PID: 13160 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2757.406040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2757.406887] Call Trace: [ 2757.407096] [ 2757.407280] dump_stack_lvl+0x8b/0xb3 [ 2757.407589] should_fail.cold+0x5/0xa [ 2757.407894] copyin+0x19/0x120 [ 2757.408167] copy_page_from_iter_atomic+0x416/0x16b0 [ 2757.408570] ? ext4_da_write_begin+0x63a/0x9a0 [ 2757.408923] ? hash_and_copy_to_iter+0x210/0x210 [ 2757.409289] ? ext4_write_begin+0x1440/0x1440 [ 2757.409658] generic_perform_write+0x2bf/0x570 [ 2757.410040] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2757.410454] ? discard_new_inode+0x190/0x190 [ 2757.410805] ? down_write_killable_nested+0x180/0x180 [ 2757.411225] ext4_buffered_write_iter+0x164/0x460 [ 2757.411613] ext4_file_write_iter+0x3d5/0x1820 [ 2757.411997] ? lock_release+0x750/0x750 [ 2757.412326] ? ext4_file_mmap+0x250/0x250 [ 2757.412660] ? lock_is_held_type+0xd7/0x130 [ 2757.413003] vfs_write+0x9c3/0xd90 [ 2757.413296] ? __ia32_sys_pread64+0x220/0x220 [ 2757.413658] ? __fget_files+0x270/0x450 [ 2757.413985] ksys_write+0x127/0x250 [ 2757.414279] ? __ia32_sys_read+0xb0/0xb0 [ 2757.414593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.414996] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.415413] do_syscall_64+0x3b/0x90 [ 2757.415700] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2757.416089] RIP: 0033:0x7f7530800b19 [ 2757.416374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.417699] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2757.418264] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2757.418800] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2757.419343] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.419870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.420397] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2757.420948] 18:42:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80ffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 83) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2757.619459] FAULT_INJECTION: forcing a failure. [ 2757.619459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2757.620460] CPU: 1 PID: 13179 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2757.621084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2757.621953] Call Trace: [ 2757.622156] [ 2757.622332] dump_stack_lvl+0x8b/0xb3 [ 2757.622645] should_fail.cold+0x5/0xa [ 2757.622953] copyin+0x19/0x120 [ 2757.623239] copy_page_from_iter_atomic+0x416/0x16b0 [ 2757.623657] ? ext4_da_write_begin+0x63a/0x9a0 [ 2757.624023] ? hash_and_copy_to_iter+0x210/0x210 [ 2757.624409] ? ext4_write_begin+0x1440/0x1440 [ 2757.624790] generic_perform_write+0x2bf/0x570 [ 2757.625164] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2757.625577] ? discard_new_inode+0x190/0x190 [ 2757.625936] ? down_write_killable_nested+0x180/0x180 [ 2757.626352] ext4_buffered_write_iter+0x164/0x460 [ 2757.626753] ext4_file_write_iter+0x3d5/0x1820 [ 2757.627146] ? lock_release+0x750/0x750 [ 2757.627471] ? ext4_file_mmap+0x250/0x250 [ 2757.627809] ? lock_is_held_type+0xd7/0x130 [ 2757.628162] vfs_write+0x9c3/0xd90 [ 2757.628450] ? __ia32_sys_pread64+0x220/0x220 [ 2757.628815] ? __fget_files+0x270/0x450 [ 2757.629136] ksys_write+0x127/0x250 [ 2757.629418] ? __ia32_sys_read+0xb0/0xb0 [ 2757.629730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.630135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.630540] do_syscall_64+0x3b/0x90 [ 2757.630827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2757.631242] RIP: 0033:0x7f2e40357b19 [ 2757.631528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.632869] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2757.633442] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2757.633967] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2757.634506] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.635041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.635578] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2757.636121] 18:42:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:14 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 84) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = getpid() r1 = gettid() pidfd_open(0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x40, 0x20, 0x3, 0x3, 0x0, 0xfd2, 0x81, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x401, 0x9}, 0x104c, 0xd1b, 0xffffffff, 0x4, 0x7f, 0x20, 0x51e3, 0x0, 0x80000000, 0x0, 0x8000}, r0, 0x0, r3, 0x1) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write(r5, &(0x7f0000000080)="01", 0x41030) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x1, 0x5, 0x81, 0x8, 0x0, 0xf, 0x200, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x200, 0x9}, 0x5c0, 0x7828, 0x8, 0x7, 0x3, 0x8a, 0x400, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/237, 0xed}], 0x2, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/45, 0x2d}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/238, 0xee}], 0x5, 0x0) name_to_handle_at(r4, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000800000000000021fffff392200000001"], &(0x7f00000003c0), 0x1000) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='sockfs\x00', 0x24003, &(0x7f0000000240)='\x00') syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:42:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 98) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 85) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 79) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:14 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 85) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2771.145190] FAULT_INJECTION: forcing a failure. [ 2771.145190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2771.146944] CPU: 1 PID: 13198 Comm: syz-executor.1 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2771.148116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2771.149590] Call Trace: [ 2771.149941] [ 2771.150254] dump_stack_lvl+0x8b/0xb3 [ 2771.150787] should_fail.cold+0x5/0xa [ 2771.151339] copyin+0x19/0x120 [ 2771.151801] copy_page_from_iter_atomic+0x416/0x16b0 [ 2771.152513] ? ext4_da_write_begin+0x63a/0x9a0 [ 2771.153149] ? hash_and_copy_to_iter+0x210/0x210 [ 2771.153801] ? ext4_write_begin+0x1440/0x1440 [ 2771.154433] generic_perform_write+0x2bf/0x570 [ 2771.155075] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2771.156091] ? discard_new_inode+0x190/0x190 [ 2771.156850] ? down_write_killable_nested+0x180/0x180 [ 2771.157722] ext4_buffered_write_iter+0x164/0x460 [ 2771.158557] ext4_file_write_iter+0x3d5/0x1820 [ 2771.159379] ? lock_release+0x750/0x750 [ 2771.160079] ? ext4_file_mmap+0x250/0x250 [ 2771.160783] ? lock_is_held_type+0xd7/0x130 [ 2771.161538] vfs_write+0x9c3/0xd90 [ 2771.162168] ? __ia32_sys_pread64+0x220/0x220 [ 2771.162945] ? __fget_files+0x270/0x450 [ 2771.163668] ksys_write+0x127/0x250 [ 2771.164301] ? __ia32_sys_read+0xb0/0xb0 [ 2771.164993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.165863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.166752] do_syscall_64+0x3b/0x90 [ 2771.167404] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2771.168286] RIP: 0033:0x7f5758b76b19 [ 2771.168909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.171887] RSP: 002b:00007f57560ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2771.172979] RAX: ffffffffffffffda RBX: 00007f5758c89f60 RCX: 00007f5758b76b19 [ 2771.173952] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2771.174914] RBP: 00007f57560ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.175869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.176355] FAULT_INJECTION: forcing a failure. [ 2771.176355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2771.176819] R13: 00007ffff41bc2ff R14: 00007f57560ec300 R15: 0000000000022000 [ 2771.179363] [ 2771.179696] CPU: 0 PID: 13197 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2771.180837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2771.182368] Call Trace: [ 2771.182734] [ 2771.183058] dump_stack_lvl+0x8b/0xb3 [ 2771.183616] should_fail.cold+0x5/0xa [ 2771.184171] copyin+0x19/0x120 [ 2771.184652] copy_page_from_iter_atomic+0x416/0x16b0 [ 2771.185393] ? ext4_da_write_begin+0x63a/0x9a0 [ 2771.186043] ? hash_and_copy_to_iter+0x210/0x210 [ 2771.186721] ? ext4_write_begin+0x1440/0x1440 [ 2771.187402] generic_perform_write+0x2bf/0x570 [ 2771.188077] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2771.188812] ? discard_new_inode+0x190/0x190 [ 2771.189459] ? down_write_killable_nested+0x180/0x180 [ 2771.190203] ext4_buffered_write_iter+0x164/0x460 [ 2771.190906] ext4_file_write_iter+0x3d5/0x1820 [ 2771.191588] ? lock_release+0x750/0x750 [ 2771.192164] ? ext4_file_mmap+0x250/0x250 [ 2771.192767] ? lock_is_held_type+0xd7/0x130 [ 2771.193395] vfs_write+0x9c3/0xd90 [ 2771.193917] ? __ia32_sys_pread64+0x220/0x220 [ 2771.194563] ? __fget_files+0x270/0x450 [ 2771.195148] ksys_write+0x127/0x250 [ 2771.195720] ? __ia32_sys_read+0xb0/0xb0 [ 2771.196303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.197026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.197765] do_syscall_64+0x3b/0x90 [ 2771.198295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2771.199019] RIP: 0033:0x7f5a62a86b19 [ 2771.199550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.201983] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2771.203026] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2771.204004] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2771.204968] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.205932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2771.206899] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2771.207919] 18:42:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 80) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf0ff1f, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:14 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 86) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 99) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 86) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xe0ffff00000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0xae, 0x4, 0x20, 0x0, 0xfffffffffffffffa, 0x2010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdd16, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x8, 0x2c6, 0x0, 0x9, 0x4, 0x3ff8, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x8, r0, 0x1) 18:42:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 87) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf0ffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) pread64(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x7fffffff) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2002, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227e, &(0x7f0000000140)={0x0, 0xc777, 0x20, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) openat(r2, &(0x7f0000000240)='./file1\x00', 0x141041, 0x2) ioctl$CDROM_GET_CAPABILITY(r4, 0x5331) openat(r2, &(0x7f0000000040)='./file1\x00', 0x240600, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r6, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) sendfile(r1, r5, &(0x7f00000001c0)=0x1, 0x80) 18:42:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 81) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:28 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 87) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 100) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 88) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 82) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:28 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 88) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2785.405005] FAULT_INJECTION: forcing a failure. [ 2785.405005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2785.406978] CPU: 1 PID: 13277 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2785.407611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2785.408451] Call Trace: [ 2785.408649] [ 2785.408828] dump_stack_lvl+0x8b/0xb3 [ 2785.409138] should_fail.cold+0x5/0xa [ 2785.409434] copyin+0x19/0x120 [ 2785.409701] copy_page_from_iter_atomic+0x416/0x16b0 [ 2785.410103] ? ext4_da_write_begin+0x63a/0x9a0 [ 2785.410466] ? hash_and_copy_to_iter+0x210/0x210 [ 2785.410834] ? ext4_write_begin+0x1440/0x1440 [ 2785.411198] generic_perform_write+0x2bf/0x570 [ 2785.411586] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2785.411984] ? discard_new_inode+0x190/0x190 [ 2785.412327] ? down_write_killable_nested+0x180/0x180 [ 2785.412733] ext4_buffered_write_iter+0x164/0x460 [ 2785.413138] ext4_file_write_iter+0x3d5/0x1820 [ 2785.413504] ? lock_release+0x750/0x750 [ 2785.413818] ? ext4_file_mmap+0x250/0x250 [ 2785.414155] ? lock_is_held_type+0xd7/0x130 [ 2785.414503] vfs_write+0x9c3/0xd90 [ 2785.414789] ? __ia32_sys_pread64+0x220/0x220 [ 2785.415148] ? __fget_files+0x270/0x450 [ 2785.415476] ksys_write+0x127/0x250 [ 2785.415765] ? __ia32_sys_read+0xb0/0xb0 [ 2785.416076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2785.416478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2785.416891] do_syscall_64+0x3b/0x90 [ 2785.417181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2785.417574] RIP: 0033:0x7f5a62a86b19 [ 2785.417857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2785.419190] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2785.419765] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2785.420297] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2785.420855] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2785.421391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2785.421925] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2785.422514] [ 2785.454546] FAULT_INJECTION: forcing a failure. [ 2785.454546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2785.455619] CPU: 1 PID: 13285 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2785.456244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2785.457077] Call Trace: [ 2785.457274] [ 2785.457451] dump_stack_lvl+0x8b/0xb3 [ 2785.457751] should_fail.cold+0x5/0xa [ 2785.458051] copyin+0x19/0x120 [ 2785.458312] copy_page_from_iter_atomic+0x416/0x16b0 [ 2785.458712] ? ext4_da_write_begin+0x63a/0x9a0 [ 2785.459068] ? hash_and_copy_to_iter+0x210/0x210 [ 2785.459448] ? ext4_write_begin+0x1440/0x1440 [ 2785.459810] generic_perform_write+0x2bf/0x570 [ 2785.460178] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2785.460577] ? discard_new_inode+0x190/0x190 [ 2785.460923] ? down_write_killable_nested+0x180/0x180 [ 2785.461333] ext4_buffered_write_iter+0x164/0x460 [ 2785.461716] ext4_file_write_iter+0x3d5/0x1820 [ 2785.462088] ? lock_release+0x750/0x750 [ 2785.462404] ? ext4_file_mmap+0x250/0x250 [ 2785.462744] ? lock_is_held_type+0xd7/0x130 [ 2785.463090] vfs_write+0x9c3/0xd90 [ 2785.463393] ? __ia32_sys_pread64+0x220/0x220 [ 2785.463789] ? __fget_files+0x270/0x450 [ 2785.464118] ksys_write+0x127/0x250 [ 2785.464406] ? __ia32_sys_read+0xb0/0xb0 [ 2785.464716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2785.465110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2785.465507] do_syscall_64+0x3b/0x90 [ 2785.465806] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2785.466211] RIP: 0033:0x7f2e40357b19 [ 2785.466505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2785.467897] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2785.468466] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2785.468999] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2785.469525] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2785.470056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2785.470586] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2785.471137] 18:42:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 83) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 89) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:43 executing program 4: creat(&(0x7f00000001c0)='./file1\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0f0c018008000100", @ANYRES32=r3, @ANYBLOB="c20730268725c8b5183d3264d3448586577fcf36e69312c1247f82eaaef29f3858725f42b353e500af7c331f3f28fc32624656b15eaff28c0dee69bb07c0387fff04a6b61f1492ef53076a313a525b18653fde6762b2f41719e04172a18b455d598a44a2d9fd44509bfface2dafc4e5986c505e27c72f6490192705abc36375ba15f76ee473bbd559c64acb88171299f5a9f5b7837e1e71271bd0753cd56ec6f61da5ac18987ab43e5ab3eef2a1a7dfa744774fa4762fa2833671b1bdff08c08976e3e00"/207], 0x20}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x0, @private}}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x7ff}, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x253}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write(r4, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:42:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 89) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="02", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2800.508480] FAULT_INJECTION: forcing a failure. [ 2800.508480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2800.510313] CPU: 1 PID: 13299 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2800.511574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2800.513284] Call Trace: [ 2800.513683] [ 2800.514039] dump_stack_lvl+0x8b/0xb3 [ 2800.514645] should_fail.cold+0x5/0xa [ 2800.515249] copyin+0x19/0x120 [ 2800.515790] copy_page_from_iter_atomic+0x416/0x16b0 [ 2800.516608] ? ext4_da_write_begin+0x63a/0x9a0 [ 2800.517329] ? hash_and_copy_to_iter+0x210/0x210 [ 2800.518094] ? ext4_write_begin+0x1440/0x1440 [ 2800.518832] generic_perform_write+0x2bf/0x570 [ 2800.519578] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2800.520359] ? discard_new_inode+0x190/0x190 [ 2800.521063] ? down_write_killable_nested+0x180/0x180 [ 2800.521892] ext4_buffered_write_iter+0x164/0x460 [ 2800.522665] ext4_file_write_iter+0x3d5/0x1820 [ 2800.523423] ? lock_release+0x750/0x750 [ 2800.524081] ? ext4_file_mmap+0x250/0x250 [ 2800.524756] ? lock_is_held_type+0xd7/0x130 [ 2800.525658] vfs_write+0x9c3/0xd90 [ 2800.526287] ? __ia32_sys_pread64+0x220/0x220 [ 2800.527007] ? __fget_files+0x270/0x450 [ 2800.527671] ksys_write+0x127/0x250 [ 2800.528296] ? __ia32_sys_read+0xb0/0xb0 [ 2800.529084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.529897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.530675] do_syscall_64+0x3b/0x90 [ 2800.531256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2800.532036] RIP: 0033:0x7f7530800b19 [ 2800.532619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.535189] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2800.536368] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2800.537396] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2800.538457] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2800.539516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2800.540608] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2800.541698] 18:42:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x400000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="03", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r1, &(0x7f0000000000)="d85288c8dd04e72cf7e1b559059f45999167ea2cdc3795c661747788a5e21275c1c11cabb39e65d1a2c7e75df446215941c5cb160166f61f89aaced307757a0e970c6f2d858bbd490e9971051d2a2011e20afbfb8ed177d372985a3a5a8c44931e6c05", 0x63) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:42:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x500000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 90) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 90) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="04", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1010000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 84) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x600000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:56 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 91) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="05", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 85) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 91) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:42:56 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x40, 0x2, 0x3, 0x9, 0x0, 0x24, 0x8400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffffffffffffff7, 0x7f, 0x4, 0x1000, 0x0, 0x3ff, 0x0, 0x80000000, 0x0, 0xffffffff}, r1, 0x8, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000400)='hugetlbfs\x00', 0x1008, &(0x7f0000000440)='[\x00') perf_event_open(&(0x7f0000000180)={0xc3b44bb344364e1c, 0x80, 0x7, 0x1, 0x5, 0x81, 0x0, 0x8, 0x35ce15d328379e9a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x8, 0x9, 0x7, 0x3, 0x5, 0x10001, 0xb17b, 0x0, 0x7, 0x0, 0xfffffffffffffe00}, 0x0, 0xd, 0xffffffffffffffff, 0x1) write(r3, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000000)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:42:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="06", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:42:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:42:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 92) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 92) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:42:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:42:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 86) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\t', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:43:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xe9, 0x7, 0x58, 0x4, 0x0, 0x7ff, 0x40900, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x8080, 0x5, 0x5, 0x0, 0xfffffffffffffe00, 0x5, 0x4, 0x0, 0x9d, 0x0, 0x1000000000000000}, 0x0, 0xc, r0, 0x0) 18:43:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 93) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:12 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 93) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:43:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 87) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2829.348981] FAULT_INJECTION: forcing a failure. [ 2829.348981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2829.349985] CPU: 0 PID: 13418 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2829.350597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2829.351424] Call Trace: [ 2829.351620] [ 2829.351794] dump_stack_lvl+0x8b/0xb3 [ 2829.352098] should_fail.cold+0x5/0xa [ 2829.352400] copyin+0x19/0x120 [ 2829.352658] copy_page_from_iter_atomic+0x416/0x16b0 [ 2829.353066] ? ext4_da_write_begin+0x63a/0x9a0 [ 2829.353429] ? hash_and_copy_to_iter+0x210/0x210 [ 2829.353650] FAULT_INJECTION: forcing a failure. [ 2829.353650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2829.353787] ? ext4_write_begin+0x1440/0x1440 [ 2829.355727] generic_perform_write+0x2bf/0x570 [ 2829.356120] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2829.356527] ? discard_new_inode+0x190/0x190 [ 2829.356868] ? down_write_killable_nested+0x180/0x180 [ 2829.357275] ext4_buffered_write_iter+0x164/0x460 [ 2829.357654] ext4_file_write_iter+0x3d5/0x1820 [ 2829.358023] ? lock_release+0x750/0x750 [ 2829.358342] ? ext4_file_mmap+0x250/0x250 [ 2829.358673] ? lock_is_held_type+0xd7/0x130 [ 2829.359011] vfs_write+0x9c3/0xd90 [ 2829.359299] ? __ia32_sys_pread64+0x220/0x220 [ 2829.359655] ? __fget_files+0x270/0x450 [ 2829.359984] ksys_write+0x127/0x250 [ 2829.360273] ? __ia32_sys_read+0xb0/0xb0 [ 2829.360590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.360988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.361415] do_syscall_64+0x3b/0x90 [ 2829.361706] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2829.362111] RIP: 0033:0x7f2e40357b19 [ 2829.362397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.363752] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2829.364335] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2829.364882] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2829.365422] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.365954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.366491] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2829.367012] [ 2829.367186] CPU: 1 PID: 13416 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2829.368373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2829.369935] Call Trace: [ 2829.370303] [ 2829.370633] dump_stack_lvl+0x8b/0xb3 [ 2829.371190] should_fail.cold+0x5/0xa [ 2829.371757] copyin+0x19/0x120 [ 2829.372285] copy_page_from_iter_atomic+0x416/0x16b0 [ 2829.373069] ? ext4_da_write_begin+0x63a/0x9a0 [ 2829.373754] ? hash_and_copy_to_iter+0x210/0x210 [ 2829.374442] ? ext4_write_begin+0x1440/0x1440 [ 2829.375152] generic_perform_write+0x2bf/0x570 [ 2829.375834] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2829.376623] ? discard_new_inode+0x190/0x190 [ 2829.377297] ? down_write_killable_nested+0x180/0x180 [ 2829.378076] ext4_buffered_write_iter+0x164/0x460 [ 2829.378815] ext4_file_write_iter+0x3d5/0x1820 [ 2829.379526] ? lock_release+0x750/0x750 [ 2829.380151] ? ext4_file_mmap+0x250/0x250 [ 2829.380787] ? lock_is_held_type+0xd7/0x130 [ 2829.381448] vfs_write+0x9c3/0xd90 [ 2829.381995] ? __ia32_sys_pread64+0x220/0x220 [ 2829.382681] ? __fget_files+0x270/0x450 [ 2829.383302] ksys_write+0x127/0x250 [ 2829.383852] ? __ia32_sys_read+0xb0/0xb0 [ 2829.384447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.385183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.385934] do_syscall_64+0x3b/0x90 [ 2829.386473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2829.387205] RIP: 0033:0x7f5a62a86b19 [ 2829.387728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.390442] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2829.391534] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2829.392572] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2829.393586] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.394591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.395604] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2829.396648] 18:43:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\v', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:43:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:43:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:43:12 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 94) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 88) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2829.683522] FAULT_INJECTION: forcing a failure. [ 2829.683522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2829.685168] CPU: 1 PID: 13442 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2829.686265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2829.687739] Call Trace: [ 2829.688101] [ 2829.688420] dump_stack_lvl+0x8b/0xb3 [ 2829.688948] should_fail.cold+0x5/0xa [ 2829.689480] copyin+0x19/0x120 [ 2829.689938] copy_page_from_iter_atomic+0x416/0x16b0 [ 2829.690643] ? ext4_da_write_begin+0x63a/0x9a0 [ 2829.691267] ? hash_and_copy_to_iter+0x210/0x210 [ 2829.691918] ? ext4_write_begin+0x1440/0x1440 [ 2829.692582] generic_perform_write+0x2bf/0x570 [ 2829.693227] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2829.693921] ? discard_new_inode+0x190/0x190 [ 2829.694541] ? down_write_killable_nested+0x180/0x180 [ 2829.695254] ext4_buffered_write_iter+0x164/0x460 [ 2829.695914] ext4_file_write_iter+0x3d5/0x1820 [ 2829.696610] ? lock_release+0x750/0x750 [ 2829.697189] ? ext4_file_mmap+0x250/0x250 [ 2829.697784] ? lock_is_held_type+0xd7/0x130 [ 2829.698407] vfs_write+0x9c3/0xd90 [ 2829.698930] ? __ia32_sys_pread64+0x220/0x220 [ 2829.699563] ? __fget_files+0x270/0x450 [ 2829.700161] ksys_write+0x127/0x250 [ 2829.700691] ? __ia32_sys_read+0xb0/0xb0 [ 2829.701279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.701998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.702725] do_syscall_64+0x3b/0x90 [ 2829.703258] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2829.703983] RIP: 0033:0x7f7530800b19 [ 2829.704491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.706925] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2829.707970] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2829.708952] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2829.709909] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.710882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.711841] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2829.712850] 18:43:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 94) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x80000000, 0x20000) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$setsig(r1, 0xa, 0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) sendfile(0xffffffffffffffff, r1, 0x0, 0x1d6c0ee5) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x2, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000200)) 18:43:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x2a0d000000000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:43:12 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 95) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="0f", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:43:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 89) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:28 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 96) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:28 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 95) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 90) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="10", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:43:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:43:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:43:28 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x2002, 0xc96, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './file1\x00'}) fchownat(r3, &(0x7f00000000c0)='./file1\x00', r4, r5, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10043, 0x48) r7 = eventfd2(0x3ff, 0x400) mknodat(r1, &(0x7f0000000240)='./file1\x00', 0x100, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x3}}, './file1\x00'}) r9 = dup3(r8, r8, 0x80000) write(r9, &(0x7f0000000580)="01f6a7859b7e9ea6e4d0c2adfa497c2ed32ac152294c7d14475f732d6e2d0647718d12ac9e3bd1e7543c47bd1e6e2c9c0b1a81976d39e8b46928c92530ad23c9992ae1fc58b5828683f6cdf32188dfef8c9527b393058241c08ab4937030146e702b5bddf19a970c0d213aa3f6be2db30b6a740934f50ac2f37b20adef7a832002e880d9ee80d72c4fefe4edb495d5964201d61d812436406b012369d26aa5e8875f203871428a9735f3df930c7452828f6b9c536ed033b3b483fbd7cde87b3e2932b7f2868ac9333e98d3c4e0d2bb0f090c2d454be6fbff9de1dc72b3c26847b4a45ce3b86d00"/245, 0xf5) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000001c0)=@ng={0x4, 0x9, "59fa20266bdc9c7001"}, 0xb, 0x1) 18:43:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 91) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:43:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='A', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:43:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:43:44 executing program 4: recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xad, 0xc26}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x81, 0x5, 0x20, 0x7f, 0x0, 0xfff, 0x4100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xffffffffffffe2ff, 0x670c}, 0x4010, 0x8, 0xfffffff9, 0x3, 0x1f000000, 0x5, 0x6, 0x0, 0x1, 0x0, 0xff}, 0x0, 0x9, r0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:43:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 97) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 92) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:44 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 96) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:43:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:43:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:43:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='B', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:43:44 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 93) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = getpid() r1 = gettid() r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x111001, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1, 0x2, 0x0, 0xea, 0x0, 0x7ff, 0x1048, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x801, 0x6, 0x877, 0xf, 0x4, 0xc085, 0x9, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x1, r3, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1f, 0x9, 0x7, 0x7, 0x0, 0x0, 0x3c00, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x9}, 0x24, 0x100000000, 0x0, 0x8, 0x2a, 0x7, 0x101, 0x0, 0x7, 0x0, 0x2}, r0, 0x3, r4, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1f, 0x5, 0x1, 0x5, 0x0, 0x100, 0x40000, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x932f, 0x4, @perf_config_ext={0x6, 0x3}, 0x11, 0x5, 0x3, 0x9, 0x9, 0x7, 0x2, 0x0, 0x5, 0x0, 0x9}, r7, 0x4, r5, 0x1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r8) write(r8, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:43:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:43:45 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 97) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:43:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 98) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) [ 2862.097744] 9pnet: Could not find request transport: 0xffffffffffffffff 18:43:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2862.217641] FAULT_INJECTION: forcing a failure. [ 2862.217641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2862.219459] CPU: 0 PID: 13565 Comm: syz-executor.5 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2862.220569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2862.222023] Call Trace: [ 2862.222376] [ 2862.222687] dump_stack_lvl+0x8b/0xb3 [ 2862.223222] should_fail.cold+0x5/0xa [ 2862.223754] copyin+0x19/0x120 [ 2862.224228] copy_page_from_iter_atomic+0x416/0x16b0 [ 2862.224955] ? ext4_da_write_begin+0x63a/0x9a0 [ 2862.225584] ? hash_and_copy_to_iter+0x210/0x210 [ 2862.226237] ? ext4_write_begin+0x1440/0x1440 [ 2862.226884] generic_perform_write+0x2bf/0x570 [ 2862.227544] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2862.228264] ? discard_new_inode+0x190/0x190 [ 2862.228887] ? down_write_killable_nested+0x180/0x180 [ 2862.229624] ext4_buffered_write_iter+0x164/0x460 [ 2862.230306] ext4_file_write_iter+0x3d5/0x1820 [ 2862.230962] ? lock_release+0x750/0x750 [ 2862.231525] ? ext4_file_mmap+0x250/0x250 [ 2862.232116] ? lock_is_held_type+0xd7/0x130 [ 2862.232736] vfs_write+0x9c3/0xd90 [ 2862.233247] ? __ia32_sys_pread64+0x220/0x220 [ 2862.233882] ? __fget_files+0x270/0x450 [ 2862.234469] ksys_write+0x127/0x250 [ 2862.234985] ? __ia32_sys_read+0xb0/0xb0 [ 2862.235543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.236253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.236989] do_syscall_64+0x3b/0x90 [ 2862.237535] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2862.238236] RIP: 0033:0x7f5a62a86b19 [ 2862.238747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2862.241131] RSP: 002b:00007f5a5fffc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2862.242148] RAX: ffffffffffffffda RBX: 00007f5a62b99f60 RCX: 00007f5a62a86b19 [ 2862.243094] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 2862.244036] RBP: 00007f5a5fffc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.244994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2862.245955] R13: 00007fff5a4c317f R14: 00007f5a5fffc300 R15: 0000000000022000 [ 2862.246970] [ 2862.485135] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 94) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="81", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 99) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 98) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:00 executing program 4: r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xc2, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x7e, 0x9b, 0xa, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0xdc, 0x3}, 0x0, 0x7, 0x0, 0x3, 0x7, 0x48, 0xc220, 0x0, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r0, 0xb) write$binfmt_misc(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xb0) 18:44:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2877.255350] FAULT_INJECTION: forcing a failure. [ 2877.255350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2877.257280] CPU: 1 PID: 13595 Comm: syz-executor.3 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2877.258463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2877.260006] Call Trace: [ 2877.260391] [ 2877.260731] dump_stack_lvl+0x8b/0xb3 [ 2877.261302] should_fail.cold+0x5/0xa [ 2877.261862] copyin+0x19/0x120 [ 2877.262355] copy_page_from_iter_atomic+0x416/0x16b0 [ 2877.263102] ? ext4_da_write_begin+0x63a/0x9a0 [ 2877.263786] ? hash_and_copy_to_iter+0x210/0x210 [ 2877.264496] ? ext4_write_begin+0x1440/0x1440 [ 2877.265213] generic_perform_write+0x2bf/0x570 [ 2877.265923] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2877.266701] ? discard_new_inode+0x190/0x190 [ 2877.267372] ? down_write_killable_nested+0x180/0x180 [ 2877.268130] ext4_buffered_write_iter+0x164/0x460 [ 2877.268898] ext4_file_write_iter+0x3d5/0x1820 [ 2877.269621] ? lock_release+0x750/0x750 [ 2877.270232] ? ext4_file_mmap+0x250/0x250 [ 2877.270879] ? lock_is_held_type+0xd7/0x130 [ 2877.271555] vfs_write+0x9c3/0xd90 [ 2877.272110] ? __ia32_sys_pread64+0x220/0x220 [ 2877.272804] ? __fget_files+0x270/0x450 [ 2877.273435] ksys_write+0x127/0x250 [ 2877.273994] ? __ia32_sys_read+0xb0/0xb0 [ 2877.274616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.275391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2877.276175] do_syscall_64+0x3b/0x90 [ 2877.276751] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2877.277525] RIP: 0033:0x7f2e40357b19 [ 2877.278047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2877.280662] RSP: 002b:00007f2e3d8cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2877.281746] RAX: ffffffffffffffda RBX: 00007f2e4046af60 RCX: 00007f2e40357b19 [ 2877.282786] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 2877.283809] RBP: 00007f2e3d8cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2877.284859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2877.285879] R13: 00007ffffd180b7f R14: 00007f2e3d8cd300 R15: 0000000000022000 [ 2877.286935] 18:44:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 95) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2877.430176] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\x00', 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:00 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 100) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:00 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 99) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 96) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x8424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f0000000380)={0x17, 0x1ff, 0x8}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000005, 0x1010, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x1, {0x0, r4}}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write(r5, &(0x7f0000000080)="01", 0x41030) linkat(r6, &(0x7f0000000300)='./file1\x00', r6, &(0x7f0000000400)='./file1\x00', 0x1400) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) mknodat$null(r2, &(0x7f00000001c0)='./file1\x00', 0x100, 0x103) r7 = getpgrp(r0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7f, 0x7, 0x6, 0x1, 0x0, 0x5, 0x1000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000440), 0x4}, 0x4, 0x6, 0xf7c2, 0x3, 0x9, 0x5, 0x3, 0x0, 0x61}, r7, 0x3, 0xffffffffffffffff, 0x7) [ 2877.840901] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 97) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:14 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 100) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x12010000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="10", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x6, 0xffff, 0x1, 0xffffffff}) 18:44:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 98) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="fe", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 2891.863276] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2891.887992] FAULT_INJECTION: forcing a failure. [ 2891.887992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2891.889762] CPU: 0 PID: 13669 Comm: syz-executor.2 Not tainted 5.19.0-rc7-next-20220720 #1 [ 2891.890896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2891.892402] Call Trace: [ 2891.892781] [ 2891.893106] dump_stack_lvl+0x8b/0xb3 [ 2891.893657] should_fail.cold+0x5/0xa [ 2891.894206] copyin+0x19/0x120 [ 2891.894684] copy_page_from_iter_atomic+0x416/0x16b0 [ 2891.895410] ? ext4_da_write_begin+0x63a/0x9a0 [ 2891.896066] ? hash_and_copy_to_iter+0x210/0x210 [ 2891.896774] ? ext4_write_begin+0x1440/0x1440 [ 2891.897433] generic_perform_write+0x2bf/0x570 [ 2891.898108] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 2891.898846] ? discard_new_inode+0x190/0x190 [ 2891.899475] ? down_write_killable_nested+0x180/0x180 [ 2891.900211] ext4_buffered_write_iter+0x164/0x460 [ 2891.900931] ext4_file_write_iter+0x3d5/0x1820 [ 2891.901601] ? lock_release+0x750/0x750 [ 2891.902182] ? ext4_file_mmap+0x250/0x250 [ 2891.902792] ? lock_is_held_type+0xd7/0x130 [ 2891.903405] vfs_write+0x9c3/0xd90 [ 2891.903929] ? __ia32_sys_pread64+0x220/0x220 [ 2891.904568] ? __fget_files+0x270/0x450 [ 2891.905186] ksys_write+0x127/0x250 [ 2891.905716] ? __ia32_sys_read+0xb0/0xb0 [ 2891.906299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.906998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2891.907735] do_syscall_64+0x3b/0x90 [ 2891.908273] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2891.909002] RIP: 0033:0x7f7530800b19 [ 2891.909518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2891.911952] RSP: 002b:00007f752dd76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2891.912988] RAX: ffffffffffffffda RBX: 00007f7530913f60 RCX: 00007f7530800b19 [ 2891.913968] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000003 [ 2891.914936] RBP: 00007f752dd761d0 R08: 0000000000000000 R09: 0000000000000000 [ 2891.915908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2891.916888] R13: 00007fff9efc52ff R14: 00007f752dd76300 R15: 0000000000022000 [ 2891.917881] 18:44:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="fc03296694b95c2fd8e6827942f43f4d9bb1b875a90699eda32aa18df7da5ef490024d8dfd5d57d3dd31280a0ca7c8e96c84db9f0b7ff7aab51febffe3d77a51205e98662cb590d692e7c49ec8d6c69f39eb916c6e97dd67eb8700ab82524179225c6744818e4080a0a402ddbbc602a68951f9eca2c1af63b631bd", 0x7b}, {&(0x7f0000000380)="24b246c7417646af7be375bb72cbfd11d0fd1b9820de4caa298c5808cdfda8b6cf437aa1097b5dbcc4f0adc64d824963a8b0919d5b68b6557e7cf82e0b083a995d644f1ba18d0a", 0x47}, {&(0x7f0000000400)="0887492e129051cf40d41016d8120b008bf06f565eae6dfe7396451231a3fcf37666bc9f44310f91dd67c595145fbc1f9af63de2e08326f90be8a9adfd4254a5f29ee030c6623085307aae39243a4edb", 0x50}, {&(0x7f0000000480)="f39b419a4322fbd8dc8fb9535667b5a65c1e31a8dbc259dc1557590182e647f5ef39fcb0949ec77f1e81d73ed1b9a2a3576ca30cefdfd4a5e35fc398078f10f06a6503c5c0ad91e7fc64e2b3bb03fb76ff8bb0aa4d7923210a975b4dbf5efcb4c937b6996c46e00f12eaa345a3110601b2bdcb6ba9627c6fda491e8ec1ac6fb4568ea2b96e23ad80c5c7f2b4c5b3834df806a7167d04880003e944e9740a6a39dfd7cafd5741e8e1c747e70dc96526847e95ec6b118aac2e6e6ed30db5b058ec1b7485faf00ee8", 0xc7}], 0x4, 0x3, 0x400) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:44:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="02", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:15 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41000) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 99) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2892.172075] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:27 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="02", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 100) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) recvfrom$unix(r1, &(0x7f0000000000)=""/62, 0x3e, 0x10001, &(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:44:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x4102f) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:27 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="03", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1fffefff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2904.765287] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:27 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41031) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:27 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="03", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2905.062008] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:42 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="04", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x300, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="04", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:42 executing program 4: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, r1, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:44:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="02", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41041) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1ffff000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41042) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="03", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2919.666883] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2919.670473] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:42 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="05", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x500, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="05", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x7ffffffff000) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x183a00, 0xca) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:44:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 2920.206235] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2920.209557] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x8, 0x3, 0x1}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r1) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="04", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x24000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x600, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:44:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) mount_setattr(r1, &(0x7f0000000000)='./file1\x00', 0x9400, &(0x7f0000000040)={0x0, 0x82, 0x80000, {r0}}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:44:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="06", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="06", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:44:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b0d0000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="c3cd2c35b66ebd36935004c954cba08701131c09458362be699f4ab285"], 0x20}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000240)=""/222, 0xde}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x100200) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:44:56 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="05", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 2932.984322] 9pnet: Could not find request transport: 0xffffffffffffffff 18:44:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\t', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:44:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2e000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:44:56 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)='\b', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:10 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)='\t', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:10 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\f', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x700, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="06", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:45:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r6) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4c000) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000089}, 0x8000) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:45:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='\a', 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) chdir(&(0x7f0000000000)='./file1\x00') [ 2947.703462] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2947.707638] 9pnet: Could not find request transport: 0xffffffffffffffff 18:45:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:45:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xd2a, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x55050000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="0f", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:11 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="0f", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1020, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='\t', 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:45:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x2}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)="90c699e31942275b7caed9115fe1cbf930b314e50a4551cce388f4d3fd22c03913762fbdf99211ed955b05ff6ed995cca5c6c790e5a2f4b82763ce2d481c0f8ca32eba37a435976160315746540f121831311f222460defa1b23338017cfe47cf51c14d6d53e61b5c247920f848f27d3df2586e7cd3264f4d5316a55325e717b4ea7ebb59fd9fc32f02c81ba4c2d90a6c12105f6fbe2ece399884a2886", 0x9d, 0x0, &(0x7f0000000380)={0x2, 0xca, {0x0, 0xc, 0xe, "ec5c5be2041ca13c48811a8bda76", 0xaf, "4e91f1fe5c00caf642869ac3514493d40ed00dd752d87fc312888569a6695ae8e08b8b0a6c34f52b1034b10a37ecc9623c3b54529be929e7e890d69d00a1763b6eff84e1184f51187ccc39e203ebe7e20868dbe397d4d31b8e846a03c893ea0e94b2e5eccd0d7baa1547019bded86c5e7e03bebbb17ac53ec91c718d71bd3080ce0009b4ace8fe700b37e57ea1ed671afd4049faf413f20e2f72ad0bfc025d31421697ef41082ca1889137c26e6fca"}, 0x17, "4930832f8a1f94437fd2cd37cd8ccf89b4021d5d64b780"}, 0xed}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 18:45:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x64000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="10", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:24 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="10", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2010, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='A', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7e000000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="0f", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000480)=""/145, 0x91) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, r2, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@remote, 0x4e21, 0x6, 0x4e23, 0xdc, 0x2, 0x0, 0xa0, 0x2b, 0x0, r2}, {0x9, 0x4, 0x17eaa1fbc0, 0x5, 0x1, 0x7fffffff, 0x80, 0x4}, {0xfffffffffffffffe, 0x2, 0x80, 0x7f}, 0x4, 0x6e6bbe, 0x2, 0x1, 0x2, 0x2c83932c3143d427}, {{@in=@broadcast, 0x4d3, 0x32}, 0xa, @in=@local, 0x3507, 0x4, 0x2, 0x5, 0x1, 0x2, 0x5}}, 0xe8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000000)={0x0, 0xd668, 0x1, 0x0, 0x13e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:45:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)='A', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000040)=0x98, 0x5) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r2 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r4 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000018c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9b, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0}) r11 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000500)={r9, r10, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000052b00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x5, "93c918d4725b5c"}) syz_io_uring_setup(0x693, &(0x7f0000000240)={0x0, 0xc016, 0x2, 0x0, 0x124, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:45:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2a0d, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 2975.515889] loop1: detected capacity change from 0 to 256 [ 2975.635732] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:45:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xedc0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="10", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)='B', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80040000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='B', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x20000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:39 executing program 1: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:45:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:45:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='A', 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xe0ffff, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x81020000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="81", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="10", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:53 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="81", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x101042, 0x68) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendfile(r0, r1, &(0x7f00000002c0)=0x6, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x32a7, &(0x7f0000000000)={0x0, 0x2473, 0x1, 0x2, 0x31c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x56454a4e26d93744}, 0x7) write(r0, &(0x7f0000000080)="01", 0x41030) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f0000000380)=""/75, 0x1ff}) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc77a, 0x1, 0x3, 0x20000000}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) recvfrom(r1, &(0x7f00000004c0)=""/95, 0x5f, 0x0, 0x0, 0x0) lseek(r4, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_hsr\x00'}) getdents(r4, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0xee) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000240)={{0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x6, @random="1f4cc21aa719"}, 0x8, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 'bond_slave_1\x00'}) 18:45:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='B', 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:45:53 executing program 4: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xc2, 0x0, 0x7f, 0x0, 0x0, 0x3ff, 0xa88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x3d8}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:45:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:45:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:45:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)='\x00', 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:45:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:45:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xa1ffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 2990.321775] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2990.323483] 9pnet: Could not find request transport: 0xffffffffffffffff 18:45:53 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)='\x00', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) openat(r0, &(0x7f00000000c0)='./file1\x00', 0xd0241, 0x40) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0x6, 0x0) getdents(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r2, 0xee) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:46:08 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="fe", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xe4ffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:08 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\x00', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="434bfefafeda3500dae67652bae7a4da725ddf13d16a3ce6b20d297aa8b036122962311b6ae7b9e5f017d7", 0x2b}, {&(0x7f0000000380)="492a38e7c6c005c477a82fa22ef323a653289c4d215a0a90fcc967e48ae13c36810554dd2d44d7d43ab03e7e0f17c7e79046572b4d74cd52807d8a39fb9506b0a01db72ed0542ea12569", 0x4a}, {&(0x7f0000000400)="bb922a9cacf4ae87d34b400bc2f24f3a892b3b8412d9301b45d06c2046346391c0562373d45b01ae535da7d73ff8dc040880d2ac56e1055edd22040152766d93daa26947db06fc435c41739a6244c96314d95ebd9dd652a8bf524c859b9d77e7e016e6d022e6263d7e7a996232ea7060602284f11c05d58997b0383791528cf3523a0b226ce91e083d34eee2f2d5bd86ef145d25a469653b5fd668538c868e72b7a3ee863d6f719258511226196415d45a034446ca4df548acaf6f8f779007a225", 0xc1}, {&(0x7f00000001c0)='>L', 0x2}], 0x4, 0x7, 0x8) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:46:08 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="fe", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 3005.883253] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x3000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41000) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:22 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:22 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="10", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), 0x20080, &(0x7f0000000380)={[{@huge_always}, {@uid={'uid', 0x3d, r2}}, {@huge_always}, {@mode={'mode', 0x3d, 0x3}}], [{@fowner_lt={'fowner<', r3}}, {@pcr}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_type={'subj_type', 0x3d, '@$&*5@^%3'}}]}) sendfile(r1, r0, &(0x7f0000000300)=0x81, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)="3f0638e810d9ff0f78ebfbe616ee66465642b230925b00a703397fe725ab31a8ff7b91cee755fed4ac15f5df7358b9ee9c5b2a5a01b04cbdbe5198632087a880b515670669504e10427fc4ddcb81740e783e55d021192dd6449f335a6b31ffb380944413f25c679b603fb8153f", 0x6d, r0}, 0x68) 18:46:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xff, 0x2, 0x1, 0x9b, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x8020, 0xf41, 0x3f, 0x9, 0x4, 0x8, 0x7e9, 0x0, 0xffff0000, 0x0, 0x9}, r1, 0x5, r4, 0x8) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:46:22 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\x00', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x2279, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0xfffffffc, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x110, r2, 0x0) syz_io_uring_setup(0x5697, &(0x7f0000000100)={0x0, 0x1, 0x20, 0x1, 0x21c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd_index=0x4, 0x100, 0x4, 0x9, 0x4, 0x0, {0x3, r5}}, 0x7) 18:46:22 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x4102f) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x4102f) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 3019.983564] 9pnet: Could not find request transport: 0xffffffffffffffff [ 3019.986371] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf62f0000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x6, 0x9, 0x80, 0x2, 0x0, 0x344, 0x43401, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x10200, 0x2, 0xffffffff, 0x1, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xdb, 0x7f, 0x0, 0x4, 0x0, 0x81, 0x4220, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x53f, 0x2, @perf_config_ext={0x80, 0x96}, 0x400, 0x7, 0x1, 0x6, 0x0, 0x7, 0xe92, 0x0, 0x9}, 0x0, 0xd, r0, 0x8) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0xa0, 0xa6, 0x3f, 0x0, 0xff, 0x0, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x6, 0x6, 0x5, 0xfffffffffffffff8, 0x9, 0x43, 0x0, 0x1ff, 0x0, 0x800}, 0xffffffffffffffff, 0x8, r1, 0x1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x1cf8, &(0x7f0000000140)={0x0, 0xc77a, 0x1, 0x2, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) 18:46:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x4000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)='\t', 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:23 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41031) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) [ 3020.444488] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41041) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x5000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x240c81, 0x24) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:46:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41031) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x400000}, 0x52002, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x2480, 0x100) finit_module(r1, &(0x7f0000000240)='!#@\\]\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0xff, 0xff, 0x6, 0x0, 0x100000000, 0x20, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x3f}, 0x40062, 0x1, 0x80000001, 0x1, 0x85, 0xe678, 0x7, 0x0, 0x5, 0x0, 0x3f}, 0xffffffffffffffff, 0x7, r0, 0x8) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:46:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="fe", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:38 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x8, 0x3ff}, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:46:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xf92f0000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3035.993115] 9pnet: Could not find request transport: 0xffffffffffffffff [ 3035.995741] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:39 executing program 4: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x200800) dup2(r0, r1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000380)) write(r2, &(0x7f0000000080)="01", 0x41030) r4 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x197, 0x1, 0x0, 0x213e}, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000300)=0x0) syz_io_uring_setup(0x544d, &(0x7f0000000400)={0x0, 0xd3aa, 0x10, 0x3, 0x6b, 0x0, r4}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0x6, 0x0, 0x8, 0x3, 0x1}, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) fsetxattr$security_ima(r7, &(0x7f0000000200), &(0x7f0000000480)=@md5={0x1, "a993fe07774fb4bf22f4c7a28c3f5e8f"}, 0x11, 0x2) 18:46:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41041) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41042) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x6000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x4, 0x3) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r1, 0x10000000) write(r0, &(0x7f0000000080)="01", 0x41030) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x10, 0x0, 0x3e4}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:46:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) [ 3036.521117] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41042) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x18000, 0x200, 0x0, 0x0, 0xfffffffffffffffd, 0x8c6, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x6}, 0x6002, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = dup(0xffffffffffffffff) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4d7989030bff1aa7ae52255291511e39ac8943d9539481446a425f2bbea9d0e1657137b5c535a5325b64abfcc7243bb4b274282bb406ccb88768c701508d4ebe94cfd48c4d273cd1abddbcab2785e748a9d7baed89f66647c89262f56265ca8990e6b3d23b3cfe250313626df01b5c3ac1611c912f45a6c5f9d165d812540a7dd39bf15569b85d0923e00ef32e8d45d1f05d4f68c2f3867fdd83b19ceba3f6821b634d42a2fd8d63af4b93c131e4", @ANYRES16=0x0, @ANYBLOB="000825bd7000fbdbdf250e00000058000380060004000200000008000100000000001400020076657468305f766c616e0000000000000800010002000000080003000100000008000300020000000800030000000000051908003a00000008000500640101010800050007000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x5) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r2, &(0x7f0000000200)='x', 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4f) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3}) write(r0, &(0x7f0000000080)="01", 0x41030) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x102) write(r5, &(0x7f0000000380)="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", 0xff) 18:46:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x4102f) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x7000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xcc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44810) write(r5, &(0x7f0000000240)="4182361077a64e90320cbdc767b275882cf5183c92a1a1ef74d79adb38aab697693ca1a7442afc35f5d758b52baff5e72b7cb398a1ec633bed8e7cce4cc795b9f78a7ffd5156ce9ce71cf0eae906cd3c678d010000005050207e5b6a2bd23b641767476be7489681b4ab8bd7b272bd2a140cee017eba8c9d64aaf115da4e527f54", 0x81) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x8efd, 0x1, 0xfffffffc}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x24000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', r7, 0x29, 0x1, 0x67, 0x9, 0x5f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x700, 0x200, 0x401}}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000480)="431fc9e8cef4de9c38b6f79c85af80f3fbf616a2291796698e57f39254ee63562f262ee4bd7e9db546c0d97f8df8d69b5d9d568556c90757dc2a4ea953dbed1eb83299d88f7b124ffa801f8dd7c3d935b849ce0c6dab6c45f0622b43ea2e9b71dba1c659384461db82c1b60852c9533c45ab456d54efea72db23c34fd313de2eac91a1e9a58f26dfb72ff344c0850859d705d8027d32038df99ec9df", 0x9c}, {&(0x7f0000000540)="079f80ef1a329f5a07bafa7429baa984023dbe2e262a2682b070cf80887981eff80d5458d861966ae1e302220155f612297973648f96782520d84d1f421c1647c484461acc7a7b71b1e533031dcaef1d9f27451c4673918e272a7b6f0bfe2f1bf49e6fcae8e4b42ee93ceb8c383af48d4f3e80138165805e970ddbf67764f2e7f89dcdfc8112ec49a61db85eec1d8e0079729da2db873a2c78705b02e1b89a1fdeac841d97f22ee9c0daed5deb3a281f490059604a3435faa5aaeee6ca242ec52a99919ca34f8d7e", 0xc8}, {&(0x7f0000000640)="196853ed", 0x4}, {&(0x7f0000000680)="2f335255b7f4c8b69eb87691684e075ae6b23a5c7343f783dba1a90370f0bfab29aef43bcac435a00c23b80c50b185161f2c358f30a457cba2a8756c44a37c9fc4ad90517bdd76db", 0x48}], 0x4}, 0x4805) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pwritev(r9, 0x0, 0x0, 0x7fffffe, 0x0) 18:46:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x7ffffffff000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:55 executing program 1: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x104, 0x453, 0x1, 0x70bd2d, 0x25dfdbfc, "79f4d54f037672611f952b271a28f802d9cb97e7039edd15fb37220d3f54611ed904de934e095b7101fdab5521953ec56269ca412e3f13d1335ca18b6b7aa421c121af33c6bbe6f60d68d1976e57b643c0737614f0d1f36c3b888f1d456e6804aca5b16c090363cb1f21d185f584f08fa8f144023d6f4d19bfb5c09afa7ce6856acfe52b99e0fc7594b9f7e593a408b67f1d661de5d5b2576037926579d603e3f7f14dea0c33ea72ddd4e9a39d3d27ba15d9bd3addaef993c0b87c24587dd1f81b313253705a401b40b5b87dca807401d183c2bdbf075ae7ad7c6c25c5d9a8c597ef0c4b56849e34b7207cb5f88ef7fce654067f", ["", "", ""]}, 0x104}}, 0x800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x8}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 3052.458986] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x7ffffffff000) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:55 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x64c5, &(0x7f0000000000)={0x0, 0xac7d, 0x4, 0x1, 0xdf, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pread64(r1, &(0x7f0000000500)=""/18, 0x12, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x3, 0x4600c0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x180202b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@debug={'debug', 0x3d, 0x8000}}, {@privport}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cache_none}, {@version_9p2000}, {@cache_loose}, {@privport}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_measure}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) r4 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r5 = accept$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) poll(&(0x7f00000004c0)=[{r3, 0xb101}, {r0, 0x4020}, {r4, 0x4406}, {r3, 0x410}, {r5, 0x2004}], 0x5, 0x4) 18:46:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xff010000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:46:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x10000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:46:55 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41031) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:46:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x5) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r1, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x392e, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x430b, &(0x7f0000000240)={0x0, 0x7ac8, 0x8, 0x3, 0x313}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x41d2, &(0x7f00000002c0)={0x0, 0x47b5, 0x1, 0x2, 0x237d}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f00000001c0), &(0x7f0000000380)=0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000400), 0x0, 0x0, 0x800, 0x0, {0x0, r6}}, 0x3ff) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x0, {0x0, r7}}, 0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) [ 3052.754679] 9pnet: Could not find request transport: 0xffffffffffffffff 18:46:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x80001, 0x3) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:46:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x20000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) [ 3053.019225] 9pnet: Could not find request transport: 0xffffffffffffffff 18:47:09 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) syz_io_uring_setup(0x3bc9, &(0x7f0000000000)={0x0, 0xa3fc, 0x8, 0x2, 0x3f, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xff600000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41041) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7f, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2a00, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10, 0x0, 0x7, 0x0, 0x6, 0x7fffffff, 0xf2, 0x0, 0xfffffffc, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b0d0000000000000000100000000c0001800800010083c80a3af25751cdda0ddd36d67b134aa03890e344653d9d64fca5700f7bddc060ddf99eb5b3c2c86f448513df3bf39b0bf727c29e1f505abc4cdbaf34ed2847c753690c93bcee92f17dcab4a558903455bc9a4f0531e9553a64742ed3f00581326abf9481335e60", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000001c0)={0x1, 0x3}) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) openat(r1, &(0x7f0000000040)='./file1\x00', 0x408000, 0xc4) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:47:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) pwritev(r1, &(0x7f00000000c0), 0x0, 0x0, 0x3) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:09 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x20100000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x8, 0x40010, r0, 0x0) r2 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x10ae, 0x0, 0x2, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) syz_io_uring_setup(0x5d3, &(0x7f0000000240)={0x0, 0xf7ff, 0x2, 0x1, 0x3d7, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x5738, 0x4, 0x2, 0x309, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r6}}, 0xffff) r7 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000009, 0x13, r7, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x200000000, 0x0, 0xa3, 0x5, 0x0, {0x0, r6}}, 0x4157) 18:47:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r1, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffefff1f, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2a0d0000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x822c2, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x8000000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000380)={0x800, 0x7, 0x0, 0x17a, 0x9, [{0x6, 0x5, 0x6, '\x00', 0x102}, {0x80000000, 0x2, 0x8}, {0x220b, 0x9, 0xf7, '\x00', 0x1400}, {0xffffffffffffff7f, 0x2, 0x1, '\x00', 0x2008}, {0x800, 0x9, 0x20, '\x00', 0x1}, {0x6, 0x4, 0x8, '\x00', 0x2}, {0x0, 0x3f, 0x8, '\x00', 0x104}, {0x8, 0x8, 0x9, '\x00', 0x300}, {0x6, 0x8, 0x1, '\x00', 0x2000}]}) write(r2, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:47:24 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41042) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000140)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) kcmp(r2, 0xffffffffffffffff, 0x4, r0, r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r4, 0x6, 0x0) getdents(r4, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0xee) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:47:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x8cffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = syz_mount_image$msdos(&(0x7f0000003800), &(0x7f0000003840)='./file1\x00', 0x3, 0x2, &(0x7f0000003900)=[{&(0x7f0000003880)="5ec479d37ab20a7fcf1ed31f1c364d76348684440462ae9fa708598c8807abcfa210ac", 0x23, 0x5}, {&(0x7f00000038c0)="e66936b4559a32cf22e878c0f1ca66f7d53de08766ff7bd62b7c0a770b01d0b6493d030030417ffb2d6e18772813585be8c1d5", 0x33, 0x7fffffff}], 0x2, &(0x7f0000003940)={[{@nodots}, {@dots}, {@fat=@check_strict}, {@dots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_lt={'euid<', r1}}]}) openat(r2, &(0x7f00000039c0)='./file1\x00', 0x101800, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8abc, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000380)="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", 0x1000, 0x2}, {&(0x7f0000001380)="e208704644b0616d194e7866f90cc429b1c880e252a68242816e12fe3e8c12bb8b22c267e13768938d6cb645806134654d041429428791460fb3d91c666873c23cd05363a06f6d6c960afee0c9d75e53d7a304e6e17e747bb2f6ccedf8d74aac2b69eb48f2dadc29d3f2fdd573e15815b74784875ab20fae46b76541e40f405e83f3493f7c2df2eebe1deed5ab2742e4101f256b5c60099e11bde0c10cb348e864599c58dec68687e6a36e53f77237c1d982a7e8106bf1f7d192ef4bb907f8636e78427fde84284d71f4c2e0fa3ecc0c0ce82c4a11db5943d6267c8993d5f63d321f2e9d8d595ca84aac368f548fd73aca9306b5ede5fbcb90dfd0a272b400a4ff296f7089d7cf639d4bdc21c10262181ef89359d985d1019bc3d4502b2c800c9fdec45647ba9f83b78024fd1ff11e29c6dd2e4f9ba5db392f16bfa6f4ef137cd113eb31c40b40ee9f061ca0d30bc44f4b6f2419300eb8ad0fd50c4f7893f942d697a1992e51b7220ace0d9d6e5a334fe34f98694e92bd38399b245a44ef11431eb7379a4d293621f645e5189dc8740fb7c8dc99328140e7deddfb4566b5883b68a6d8897c646c4170bac2353aa3ff3a172c010ed5a9fa8c058b3c029ae532f35c42b7a36eb65c357a33c1c7ebb98df012060b5a56fcbc119909da0472c84d746ca65307298fba036770e3ff7ddd522d546d4e35abb138593457332b9dba90d3406758899fe7c51b091de4770b52e01fba3200a4c3316359838105fb88c9fd720613e6394b6afe6edfa7bcae8ba23f1aa7fda570ab9299266a674b1e28a1d26d967e477e8890118e252913ec0d923f47b183c99e894971e08094e70e6f088ea657bcb569ca927bd1fb873b065c3cbcaa0a5679f43fb09338911dcd4b298016be71a5b679a1b7254aa4f0e0a4bb78555f4732e07a22de7046d4cf624c81118bb1df0b2c7c08a0edd6f2ddbdc41dc40860df6c8dba07f0e01f373ca8bb0d854f2aa40375f4e8b2d2ce7f0361b0e4f2fbe93be0c911557e64a2ede074a5d72c1711e35b45878748eb7b2f87de862bb4ac5d949211b067332ecbc04832efb2c6c6b787f1c62cfc31391efda3ab2a9ed57c6956e85069f590de97aef8699d7e03b54f98fdb2de28eb7fd54e4562003955d6095b325df814a5add5955c314f8481df7239d69b32ca073ae3d2a1f7a0ad00db9c019c343464835ca26df6cb86a10e363f7120f4537559ac0e2b5cb5a911d221ad9feb158eee9b931795cfd76732dc495c89cfadc0aede344bb9b61bec3d48aadc9ca0f5521f7cf155616496d593cff526733264a58562cc0f4df17035574561d62103245c8bc04dfcacfe2c35571707dff78006bb0bbf13eaee44d9171640d4337a3d6dc486a5eb0c6aa35da59ff5351aa1737b173b8c9f5ae8d3f8126e4c3bcfd9bff47808c82fca592acd443bb4f015046d1b8d14d4749e86827d6d93b101dde489ff9bd5f6be3faa3aa54510d0c9d8ac0d8bbe1f51c659ca6fc054560cf4c856a35708dbe5fd18de2849d4c886ca42b0ae398788cfa81445785baf2dd6af34e0880c46e403616f3a06cc945b3ed41c045a26d31c299f65bf526ed7d8822ef17271c5b785d9b22f9030573e720f4527c1862461f9ec0a73bf517e630971f7f0592e40585248059fb305d4438d0fb6405be31f7ee2310b177f7550a468d316a6aa3dd1edeef6424ca43500df3de6ecb892d66deeee06924884e704897213c211357175466c9ff8a508bb9003972cfe46d830b60e7babf090fc4a48191ef4557d4c82ed9df5abd2742a4b1f7a23f9fd1adb053cfd18f69f22a717efea094414cf819127237ef4f4abdb2f3e8bf2e3dca5e1597de84ea8c53e420bea8a380cba04b9751fe13c84f4b3393f1597806e1dd8239c2adf50c7612ca0bdaf758874e45ed4c15fa1bab69a685c78680e76f38d3625a6b508781d215f12e5306a6ad7a82a0554c31b64fbc04e5e28f0eddb8ed1c6ef2450eda304af0175f23090944819a0591f7e3906a6c19fd0f1a102e5e9e431c7f4610b608d2bd740aaa6824469abb7dd8f1883023fd3790d4bfbf1b29f1287c69f9147469b056da95ade11b25e948ca4a8655b8a821e27185c4e3766bb704ce1e2312424a0eab15b23a8cd4b42099be7ce83d68b6c0151f49320dce8131bc9b0b02773ffc2bb20669a8177c084cf1e1e0061c7bd66f34b21d44c460210230c50884c32e391dfe2f0b44655cbc71656e24e1d038e39b42fe1a0b08a806e265b78348d5a6ddcdedd86325183e3bc3ef698181433a88091ba576d02ea297989e8ccf04e73762f5421ebdae5fbc077d171c024428bff375ccc9ab82b413b33b054389012e26d2a558bbe1e7d46f9cf562769472c2cd3a01c8d2abfc7f8175e8ac94f93a60608afbb07172ba0cfd8941dc4bad33b450ec1fd65de0d3f01c01886af11036334ada1a493cb7c22d474e09184f98b571621f9cb959d00995021f7865612c8095e4895f6de7996bf58a95dacc97a213b846c293f9eb72f6736dc0183657e064c6608968380c6453789afffbac606829e156a420f5f55667abf5eac3d62f58cef50ce4faf7832255ebf5ac422597dc5ceb9d1db36e79e81b7de81ca0def87995d98af7ec9b07a29b9cf7fd5eb73dd65d2820540510829a6ad757ce1d719fcd4152d2947a239d146580b2f3e480b7af313cd676bdb30502a65d8de9d1cb3cb3d0d9033c4759fd78442634df63869ca57724f6762de8ecad3b6fdb516a87ac394267df334cdbd4bd9344f6cfcbd5f8aae3561bda318187f7f3a16c365cb426a6fdbb4623021104b0f78aad868438c04d41ec8306eef03bbbb69fe6245a780a84a79fa1bd0fa4088ce912d983a97df75900110040a34c6cf1a98a4418d8f73bedc2c9b11970180485db2aba088b860f5968a4ea5dc1091cbc237ea28c287806597c9e5b16fafb8b933782c1ef239e20b5be87ad2ec76c7d4815dc47bca11033cafeaf259bb8d920b464e03208b65f4bd0b70e905b0cfbe439b05a2e29b9e9c2405d9d145c060b7a2aa1d6dfa4c00f6195e9bd3931d92c30e1e8d5a1b524a9993c725f65e474dcce4967f319ff5f4ff01e9409bcae8f4563f880fc3d17451b19e57b1e02c454065c11b579abaf30d4092d8c7cffe85ef242a4dc45ec9f6e4894fd921ac9112c404f2657bfa8e94d78b67acfadaebbffcbbc87750b3de89bc7b1d17b78cf385f9ae21390262ceb96d10c7d5764d9a375e25004fc6a98c2303e7731c970ac0c0114cf270ea71395e514946fa213b5d0ffde08d885e72c42638ca6359cb38ef4a6fdb0dee96abcbb946800cbcaeeade7c054db952839924a4494bab14b9300fc9caef5e94da062227948b257733561c995944c2737c2b04a4f0e3fb0971787f883196037b24b5a19c61a51ec21b43145420b61e1d697b1a38aff58209ae6a224395c5e96cdde71f3eabc85e6180f7d2952feb4d9c7401fbace47b995f82ef1994986e80f9588e98bde72f1670d9b7217d4e690b6e91d37b910d0a14a806f116a1bfc06b8258f39d11015e7d63a689176c42142e583d5998aa47a2c8743d2e9f605fd4400bda9ea916f286d28f661eeed114c481d837b779763331a4ee526a8267f5a9fe359f33a549838e95a97e54add9d891cc2c86add705a1bbb922af846b7e1f49ef053237db07b33c9e8221fba6df4d2b9676ecf9f0723aefcb86b7c9bbd9bd8e1c4b801cd3bc84bedcad25be3a448f9a0af7381b93b19b5368521245ee1e19a2a1741e1cb4bd04e67a855716549019fd583a664d77291dc73de8a7ccb3c30ddae99649876e531aba506a838157990b6a47473159b23041e8774954d9b25f273a319b9f958c61a1a186094887a0e952dc09869c3a29375a0c35f0421e788135f11329db8b207b872768b07b9a0fa864cddff8dc7446e8aa9425a25905d1643826aaad89dc4f8caa498b090f071693b79e5d4fceac13fbc790dd846f92642e37d5dfd872f1ab87b6c60a6cbd51ef718c1ff7c394682a8ad3d368b7550f6671ddcaf647271442ae900868b4fd9a436739e8c03fb910c09782d053560e1481a08d6f6498d9bbb25e8301c541d4510119febedde2f40c40d7a3f7db73b7e57e4c91820af568727ae4fbe14d898d6f54ecfea72a00e6e343ec87673f45be4760c36b26ebefe53107beaa2a84ebd38649b811c62d6d2f6d2bb79ec5cf0a9b924b228969fe214d538046bc675faba071730ca3e9adaec7a4397d449cabf881c80fd18056582d3b3ed78bdc78cf503356739937530e7da4f6c3d0710a30171b9edda46e4e3abde0fbb2f2b009f6a6992b9b005085c31fae8589330743a80df9299caf023898b5de676afb2bde00b73c9010b298434470aced82b992cb6f105dd4f2ae32f7a14fb6317a2be850360e416c7ca8850c2333a1bfbf8950597ca6e29cfba23c7af49bde6327b31e555fba74fde695640f479b505331e68f28f018ab56b9f6c3fdf37d169956c36539a059c764bf57dd5dae91a23f771ba0b404fc0df8ee7435edad5d38c2eaf62925ea60416527aeef029dd8e8d6a441ae75b13bb48e5f07472d11ad890329b0767a72f5c9d6d7dbbc9461373de0041b9924b972f18e8f8daf455eccca7b613d63bf22030ed55828cfd990be7bb267f5521a61761ce71a807321ea58051349dd8bc274b3997237e80fb5956b16922bf4da28524a804c8bc23b822163b53be62ad58e4cf0949912ee8c0bbe34f0089fc40760cf43d6b41246a4ab6c20fccd690ae0fb7ceaab6c7d577c11f07ec4fc1a24c00ef38f1412d1b5cf30baac10f04b69d3dc628caef930b34199cac348f15eee43fbdacf4dd92b1e6b44e8b98cfcdbe8ad9a94ae699bc84515bac087e541232996cef0f5692ed59c21d4a5d6a5e4ee0824096801975160275cf52d666df9596dc67d7bf875c205b51d539a76949b34274373b6858db6a85ec5251005bacadacda751ed29db4822685dc689caa9b8c5fffde7ad47e1457a8e34da4644af0e68e8a5a304e04b6f99c34fbbc876f082711120d70535fd669f2b46a08e19c631cbe7a35acd1046e494c1520dd7e3be96d9e75b3ad3f3bbf3592face930e907eeb82bc78087ceb8a46b9244e439f972c8947b3dd6b00399494d4a9ab3291116bf9ddb15101397888811eba5b7ced07977efca2eb6b58dbbaf13213b93506831992453ad7cea5cb54aa932ebda4ea82ab2ed8acd44b316605e8cc361b0b594a70fb56db41caaf1825b4afa3cb70a76b8606c0c7acddc3262e5d75ba844084695656e3f61a1af4b9e92f49ca250910cc994ad77c22638f0f65c586ac564efebcac582c44f348b62dc46ac6c5bb8a2279f108e400648abb58e9a9f00c60c572b0a21d466b402e4ba40cfb9af7ce2377f069a04920e90044545731e89c5ec93b14c94c31f86d112bac35d6de758584e181defe14162155096e61ec05056b44515c4c3b2720b15acc4814b8109750ab6fb64682c1ceae98496a410cd3a6cd5a3b4acdabde6969e4dcdeab3cac16c840b2e245f9d289d8ac4ac09c07120a13b22e562a56bc9f3810135da47724ea45cf605a418c3f9e2f96c7ff5c838353ea90f3fb1c976f4ea9d878acb73a5306fcdd0b161101a96683107565dffb2c60c2d35ce73d2842d1b6d5df045339aa78c62f11837e1cf411bc42e5d45ce4636366c13d9fe2883f0739cf585c9227ac4afad1e7ce8a5ae305ee3e2f4fda48bc2261b3f8868c339250ef73e14e46436c1d56be2fd10f829f86f1d037b0ca1f716a5aa48a5796007ca0f8a", 0x1000, 0xffffffff}, {&(0x7f0000000240)="274d80bc07923c57a0706cbb320c695e08e2f7bd8893503f2bde09861d17df7eeecd8ac3b05ab95d8e0afcdab6e3bb4f6609cc51d2c0eecacf063dd41cf5344b93371debdebe9bd34a338ade1162fa9ed15ff04740836b9a0b919e82c42e781fe17c3c", 0x63, 0x2}, {&(0x7f00000000c0)="33761f38d546fef45d438b7a69c72523615b7d1a77a382074545b3cb9aa021d319be3fe398dfe671", 0x28, 0x1f40c4ce}], 0x2835000, &(0x7f0000002380)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c816e695f786c6174653d302c736d61636b6673666c6f6f723d2c7569643e", @ANYRESDEC=r1, @ANYBLOB=',subj_type=}.#,\x00']) close(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003580)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000003680)=0x37) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002400)='./file0\x00', 0x4, 0x2, &(0x7f0000003540)=[{&(0x7f0000002440)="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", 0xfc, 0x9}, {&(0x7f0000002540)="dd52990e577152d1c8f8ad0c35319fc81b1e65fb2e54eb1b1ff260bc951a41a3afec9a88465c3c136033fba18f0fc62fbddee0bed0c8db10027c87642c43c6c8f74859e7dc576061290c9c465a7f74c240440e9fff24233394458353676f61254f28c7d15004564d5307c65f77dc073943afa812de86eaa56b6ccbef86d8b9098bbc7d1526e1b21bae2535ce99ae60d96d6691f8eabcf83f0679ede97167f0b4c56e9351c683247db13f270d3675f421ce029d731f3cbb401663b8c916f9db37ede65b895baf54b89242d1ff11ddbcf290db475cce5878f338c215e46ed3bb8c4a119b080cce3243c40f7ac572dc078984ebf28720466110ef93974e93153bc59e6f99ff2f5e5f0fecc5fe12042db3e6ad01a292b0142f21481268d22418c234774546bf5469de8fc81755fdb8070accb38a36883538d4d08bfb32ceeadf1a65ac7e4ade608da05d6edd5217bd5ae4d632d6b028eeab4d4cde2fe299c222f3d5b421ad0cba88bc9d5a18eac230a1afa2e8c9a7abe4de4c7abc448291a36fc05750606a52424ead1dd167876df51e549d8d00e1ff4a7c5b061f95aac4f89693ebd7c65e6f461c3a47246c56d8ae1481f3e741324d50c78762dcaa487ccbb57c1147634a915f5b356c66739f36ab1ae978b609777aadc654ccff9f397cf5e09991d513b867fb5ee1fdf30a72a144b5348e925e904942346d8e4c3c967d4d0a6c2568087615418d2b5819b5f25b39970183167d92b31735c8fadc027b711bd6640b8061c044a6980e7ca0178cb247d8f529fc8224eb65f19dda1120be5aac51dee95cff76482ad1e4849c7c51ace2d5be0becf31ece1e5e3689cd237cecdc8300c229cce5079a417d15458c3b17ca62ea0ff4191ddb61a5a3db90bbd580dd71455f8e8252ed0820f1adadb7e611a16a9e7d36311f3b1a1d5faf9a59cbb3b0bce74be5e7e7be56aadd8512bcdb05436d59d42fe6655d94694fce8da7bfbd47103ad01baf128352a614da6aa309bf59d2efc0c0f07628184a01a1d93162250f64247535331e9d5c5fe202f2356ed22b56b906f7660ca323f49ee777e1f3e4083569fafd25af57cd67b21fce744accf3422b3a27067b9651fccd42bcd27e095415cfee697206ee626bee5b3dad018c4fd7c9f5e6c8bd8f9c1e8c473eb6fcfb860265403b978a30ba973461ea8ce53036b3db63d54e86978f8ce1d31834cbe4c21e9b5d7a86f34e2c7d6d234fcc3581199069adc4cb5f961bc963c528ad5f60308d9662543bd871453f356bf3e6b98e88e73df8e9c50b8726dcf17da9e086d0f1bbcf4bfb800f80c9bb7bcd8cec70880d95921a22960fd669a4f6bcb4f5559e2737420df6dcf220e55007a9e7786af05ef7b2239ac35bf7619f21d01fec35ac2e192a3f202b42b977c567d308609f57446302b17517326819b76601979df96769bf4190cc55d552bf5d3cc253cdbaa1f88928513b3073ff1e54ca8eca16f116826f54739e7198dbf1876934b55b092a233e8e85f8e0edb4b5b638edfa772af76de8689e099f2fb9ed7d1c7f51b15741b1bb91f79ecbe1cc642826809e800a333aa2d8446b4b64c724bbe4fb880b8f057cc3a1b2da0d390b83f5784a26ca3d51577e9bea0e8410052e2a4503ddb560a63825b792e478263d63e219478bb14065e066d19af7600e36590a618dfafa8d69a6b0c6bc3f1a4f2ddfff4449f109d94c0b0d58bbe6089daa17e6ba3c48ef0d20001146372713b753c5892b9864bcf84861a35740a6edb06318534dce8805fed616cd9761703f675dd6d674022cd4134f132bafe8985cd58913f63d78bd72a23dd4c293707632b269bc0e2bc96a138b01b1335a44004eb3c6a6332f3431d3d54ae9712f1463159ab025f32842661880188f48b3c3b9167e491498b82a236949564d26ee5f05164352ad8c649461459560761bb68f1d4d23ae341747f4f5e94dfd7566dc004be7e1b6c4f2fda0cd0715e31a4bb20a24e1fc9c767150b5f727578c28207482b2cc14ac24ba7184b9d9b1e7a99e65f22a6ea8e1d5974404d371e17618bbc9a6e97ef79dc23bdd79c1c5df4f87410d414233687bab4c239415268af3dd75ba1c87459eb8737aabe2e9a84f3dad97739b72ff84fc93fbf41e7e1d4b812f9f9c4005b175d73f09d0f7af0ed5ef92e61892e180bf301852a401ef9d5d20e5a646d27ea8333e2e0ab2f16d1311c97417d0894d695298bac4b81341d503eaf96356f5075b451566c7044e206680046413b15040a5ce11758dc631a20570c47c91f928dbec7f97017a994fc81cd0b3168eb6bbb5da6802b0ea4fb8611be68eea9f6cf2bf914d4102fea5120ae6ffd06dc9d97b72e3c2d33d2e27b3fbd6313921a8d1aaeb1195b152af5f4b2d221ec47491bf7d22e1850229403ac236111b62a33a9504be0b3a0d09fb18e384dea51c19f10035f24d461c59a636668551ca5b1328f3e84e7c3eeb712497495f5377e271795fc9a1974bcde3b97e88984a4e8862652a5713993de8dfad4280d0bf832be7013a94a113e7cee1a097caf13c777b9f59a258ad31ae9e305c9b950bc8ea682d3e622dda1b524b24e846fbe07b3311dbbb4ef79d04bd1821e55c1dcf3a1d658d50a4fde2b8bf5d68b4968c541f3d97d2fc74218fa802a4e8ea8ff306b65584f02b799285b075938e3ef357c26a5aa576a9ff2ded68442511dcb3b9cbed1d98c144e36d407357f4753132d7e5e031e8419dde3c900c94e7c666708ecc7cefc081d56c8ac1695ba9490ada82b477786ceb63f1c4936534338e8ed49c07cb71927d59c9b352e1b96e2451f00dccd1db1a83f5f24b1cd4030b0f5646046d9a34e4a7c53318c94a18b55dc1da8e71b6dfa003e6fb1295b5446f87543e38624932f726c85754c5bc7a137f23b116f2b2369ce7b1a8241398b1a909bf1a5990d18cffbdad9ae58b15ac59eb54f1b0bc95bbc7dee85aea7278d4c6c6d0ca30a330b8e1a84e56c0f7220151131604db3b1bbb4d052a91aaae578ffe6739ab459b290ecf7dea8e56a24fd81af78cec7e9063d63b2a37fdf83bb8eea39d412f616ad333cebc47334c974000fee9caeff48fced717fc183aebc88688bebc7980533e65e596fcf3ed1fe25e1d0a758d9813943c416b527bfd477640015c24e35aa29f852a8efaa21ea69ffc68e41ddd4736b8ee5a5b31e94b8844a023bc6dca63faf4cba149e45c71642fdea84139360a42db9fd3568c78701e295efc6b64bd0c07b1907b5431c3641df31bb86eafc21674497eabd532bccd166000c9830e980735f497ce4f8de7e69b7159b40a5040269faa5a2ca027b195e862ca011d7d829d500333782d403db2fc82bd45b7804459627bf2b81b46d2a66a5a350ae0fe5596d49abe46a34e3fbe32be9626719fff049c8213a5ae2820433b8750ee09779221f7477acc04798d64d8138d04138ce43c10dc9ee50e8a0b3ed051555921e445e7bf2eac346567a1161da388e4f0725206d4727bfcb79270147dc7e50305f404819ec9eac03297cb0d83f7ecd38f9b173b1d0cf92aa038f9cf0c0ee4227ac0d0971323d6871ca015568bfb9c9498ee9fa148db25b3e3e6c2990170c3c66fa7aac5d6bfca5f542bf9023188850846753f3fc17e29fc66b72387f783284e46fd845f1e40ba10282efb6f1ff81a6feed4fea6d307cfb15145803303707565c4619744933adf3fd4665aca5e337b7f5edf58110f07e3d47b133c4f48b2c62dcd0bbe7cbcabadeadfe49e276c26d4488904b06b8886d05a2d54f763d1cb70402f31ba58946d0f12635cc306ce5134aada5d6843de8c0242aaedd477d650e854cae45614e040947f8e5de0cc36f352a66d37e92122daeaf9398ff94cc57533874b291e98a2fe814b7aa220c7b7cda0fffa92e0831201a025eb6994c4493ce69071d0cb78a6f040c8e6e76c46674c0fe30b44afc526e1faed8335db001f12845a50126ef2e0aec1bbafd6d3e27b5f8ecd3cfd3fbd59120036b1d02940797289e12c2ad0e1df46a8b8f608d5ca27f4eb0c6c2444bb170c9a1641127984b3bf1bd6dcb838f99a9ea91896aeb6e462e218b79efb6cd920320d35cc4cd679f4bd30e6e41bec5fc29f8238063e775a43636a34dd902233c53a57821c9bb1b4876def5856220be55f205520e8153b92d52b7f7b9070575a02ee9aaf3a15f1ab69985252285dfbb94611053083e89fd1f994969fd50f3db98fd2f9b0c660034b266bfd33a5c2cebdbbe0208d48784e2b0a5b9ba5264a2dba1bb5a42f749be55c4f07bbaa778db4d7ca8dcda49e78cd6dd7d740fa1c550ddb5444d64f52f1263d97bca631c8512b6ef4d2166055254bf8a4a7f674cda31843645cab794d20eb51a9616394c2417ede8643d332cd7dddad386546187d4365edeed87149f0f0d8e2d90c1665cd3cbb57deed93b6b6566905805053b4c57c5981d5bf528cfe5848b75526a9875e48c04399eb926261c54f080279c5765c235baeddec9be9f029c66fdd6bb2b13161ef4073804a7fb0180ad0aca1ddde2d55c8dfed2fd1a76568483f034b9044dd28b4eb94e12e6f1595df50dfe418b132806f0ac02ae58044bf38e783bfc163ab938cf9653cbcd89464877071fbb38738552e57448c3b4ee240dc20f77b9ccbd6e1a3c2282ac8088b37a2b4ae84b19607e0d09264cdcf789173efa4bdbf2b0bde736aed1ce9c464ac33bd5c30ea631369b1724e49decc4fef4e71106ed82f419eeb3bbb41e6a7261b6ee8a21e4a615e26a2c490df2769be9c624127e91ef5b7e948bc0bde2ea058315c363f2ee8f022a97c02e239d9db17eb9157881704aba4c6336e3a2f967a0263d23ac417e4f3e5849e051955992143328b05c87a8b5bf2a02c053af586a492f2c6f3ee64c8781ed5761c064c0d968b912a9cbe90c878b996654e637e964868561b4dab211b022f3f4902d51ea217fabbec0ed30d0fcafccd1edf32a94262ecbfbb1a7b4beef49ef3cdc75133bdbfd87345190fdd615309a9443b8e779aad23641dd3b14c76f62d3c2d3ba5b1c3d9031d7de30b4c00d6daf3029917a46afe53603144e839545f001a1c2dfac015998bc5b07ee4c72d1e08d6376f2e2f696c15c73e7a7c6c0a7d558ccca65671e6151bc201ca37a9d9f4d8ebda7a8f1eadcb08366acf19fe2a19110df6241150b57df34a589acefcd519b873d5ebf6b44f39303c368afc300d797847df77d396db10c8234e23e4257b78b526037d8c5d29cceec110383e2dc1a4d836061af31366cf9583caa8ccfa7b2e455a90cdfbf4e0c44de2fa2f1d0fe37c3d36f0e62422d02347c09ed3a3d1caa36077ff8c9bc0b00578bf0af4114cd386262028ccbd1e452c5215852bf7e7fd9f2500e30e3ad27d3c6ff17e16c6b1ba3f815f722328be4942128bad5dd6fddcbbd355f119cf87df32ef98fccdc2ef64b2095a630d594189ea42139818c8a8fbb80b94a61593367cee2def4d20efdf7ab4565e058fb4bb6ab84e55a45e71f708d654372f8ecf8039eea15364b578bb5b70fcb9bb6cdf5dee265d7b260e8cd92936f78477e440fb15192a2708b4cab860e88369e52334d5819e297fad47f8d45f4f1764829ab9b93d012b360bf1412f86d99e58eb945db4c6e768500237225d22798d20f211f921b4be01f2b90ad6b5ea9dd7c25c7207d5cff7afde3a834721ba884371a52a16ba9dd38619fb62eb87c5b027ff7d19e234e1f43804c5d36f9ca7c526532563c143c3d81e1809738fc0601b759c1de95b486809ce9a8d3da68e2974d5e7add5a1bf06b1992ed9587ef1", 0x1000, 0x1}], 0x40, &(0x7f00000036c0)={[{@shortname_mixed}, {@numtail}, {@shortname_winnt}, {@fat=@debug}, {@utf8}, {@uni_xlate}], [{@appraise_type}, {@fsmagic}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_gt={'fowner>', r1}}, {@euid_gt={'euid>', r1}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, ')^*[R)'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}]}) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:47:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) fchmodat(r3, &(0x7f0000000040)='./file2\x00', 0x18) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r2, 0x8000000) write(r2, &(0x7f0000000080)="01", 0x41030) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x30, 0x40, 0x2, 0x4, 0x0, 0x0, 0x4201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0xfffffffffffff5f5, 0x53}, 0x4089, 0x8, 0x3, 0x2, 0x7fff, 0x0, 0x2, 0x0, 0x7fffffff, 0x0, 0x5}, r6, 0xf, 0xffffffffffffffff, 0x8) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f00000000c0)={0x200, 0x80, 0x1d}, &(0x7f00000001c0)='./file1\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r8, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xc0ed0000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) faccessat(r1, &(0x7f00000000c0)='./file1\x00', 0x100) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:24 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x7ffffffff000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffff8000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x129, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3081.951278] loop1: detected capacity change from 0 to 264192 [ 3081.954152] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3081.988552] loop1: detected capacity change from 0 to 264192 [ 3082.039703] loop1: detected capacity change from 0 to 8 [ 3082.041968] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 3082.088001] loop1: detected capacity change from 0 to 264192 18:47:25 executing program 4: pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x3, 0x0, 0x2, 0x0, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0xa, 0x0, 0xfffd, 0x0, 0x7ff, 0x0, 0x200}, 0x0, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid', 0x2e0001, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000580)=0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r5, 0x6, 0x0) getdents(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0xee) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x1, 0x50, 0x9b, 0x0, 0x7ff, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000004c0), 0x8}, 0x400, 0x80000001, 0x4, 0x7, 0x8, 0x2, 0x0, 0x0, 0x7, 0x0, 0x80000001}, r4, 0x6, r5, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000380)="598a1c7a4d7f0e29590d51469e627a5b2f03fdb9225b4b6816b61bce3c51ad4e8bb0aec2ae08f69adfc9dd3f5a7f856f5923fb95f1ef6f491d7a61a4ff8e4ca8bd5e72ada85a457a200fc9f9817cea8da8723b", 0x53, 0x8, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x7fff, r3, &(0x7f00000001c0)="ca9182c1e7e8f258f390c0", 0xb, 0x1000, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000400)="03e442a3fea8a8901320e82352c13df652a6fab9ee1d7375429a0b7db97bd39214bb4244f731dc1557cb5121793d060eb444962fdca1b8344645624e727542d567ef6d88b904fe0526b24d17824934243b086317ee0f6cda019bde01d9ec0bb671e9b01caaea0ec7a54dc08f", 0x6c, 0x9, 0x0, 0x1}]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) write(r6, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) [ 3082.114571] 9pnet: Could not find request transport: 0xffffffffffffffff 18:47:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x1c6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xf6ffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:25 executing program 2: syz_io_uring_setup(0x5697, &(0x7f0000000100)={0x0, 0x1, 0x20, 0x1, 0x21c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}}, 0x1) r1 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x10ae, 0x0, 0x2, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x5738, 0x4, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r2}}, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) syz_io_uring_setup(0x4571, &(0x7f00000001c0)={0x0, 0xc93b, 0x10, 0x1, 0xdc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000380)) 18:47:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r2 = accept4$inet6(r1, 0x0, &(0x7f00000001c0), 0x800) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xfffffffe}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/srcutree', 0x180, 0x98) io_submit(0x0, 0x2, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000300)="1a28f3b5c9b51e5ffe31df30f9e9e8065806516ee37f49aaf815186cad849b6680c37768ebdfe794ae065427ae54c6f794c609db7208b2ae21874bdc28cab670a66c813a788c605c8951289cbf89929059a565f990bcb86a1749ac44d676f39c204c66d0e99e56d2f7", 0x69, 0x0, 0x0, 0x1, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000240)="9abef5ac9f9d4cdb3eb054fd8fb1b76f6a2d6b0b98a1412e4eea2c029a9c175a16dd08f0cb", 0x25, 0x200, 0x0, 0x2, r4}]) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="d6bbce67512a7e688231b8a5aca1b30953e94fc48fb6e504fd0a2e45063b0a1897fe07a37bddf0ec5afafdd129b7fb1f78075e0d635d059445d1bea4fb", @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:39 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x0, 0x6f, 0xd, 0x0, 0xa9, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x1, @perf_config_ext={0x100000001, 0x4}, 0x1000, 0xfffffffffffffff8, 0x5, 0x7, 0x3ff, 0x7, 0x665, 0x0, 0x9}, 0xffffffffffffffff, 0xa, r0, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffff000, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r0, 0x6, 0x0) getdents(r0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0xee) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x5, 0x6, 0x1, 0x5, 0x0, 0xb7, 0x4080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x1000, 0x1, 0x7fff, 0x5, 0x0, 0x1000, 0x7f, 0x0, 0x16b4, 0x0, 0x1}, 0x0, 0x4, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x113c}, 0x1, 0x0, 0x0, 0x4044081}, 0x80) 18:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:47:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xffffe000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:39 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x2, 0x0, 0x6f, 0x0, 0x8000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x1e8}, 0x10000, 0x0, 0x7, 0x4, 0x5, 0x5, 0xff01, 0x0, 0x7, 0x0, 0xffffffffffffffc3}, 0x0, 0xf, r1, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6bf41382c9113200fa", @ANYRES16=r3, @ANYBLOB="0b0d0000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000240)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) write(r6, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:47:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xffffff8c, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/138, 0x8a}], 0x1, 0x20, 0xff) r2 = getpgrp(0x0) syz_open_procfs(r2, &(0x7f0000000200)='net/dev\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r3, 0x6, 0x0) getdents(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0xee) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x40000000}) 18:47:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:47:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x22a, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = signalfd4(r0, &(0x7f0000000040)={[0x8ccd]}, 0x8, 0x800) finit_module(r1, &(0x7f00000001c0)='\x00', 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) r2 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r4, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x0, 0x40bb, 0x2}) 18:47:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xfffffff6, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x4, 0x12, 0x13, 0x0, 0x991, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x1000, 0x1}, 0x100, 0x401, 0xe5c, 0x9, 0x80, 0xff, 0x80, 0x0, 0x400, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x2ea, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x2122}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) r3 = fsmount(r1, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000010a40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file1\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/175, 0xaf}], 0x1, &(0x7f0000010a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f00000004c0)=ANY=[@ANYBLOB="da0a000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd00"/66688]) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000109c0), 0x2400, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000010a00)={0x60000008}) perf_event_open(&(0x7f0000010940)={0x5, 0x80, 0x1, 0x1, 0x0, 0xa5, 0x0, 0x6ec5, 0x104, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x404, 0xfffffffffffffff7, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f}, 0x0, 0x3, r8, 0x1) 18:47:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffa1, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:47:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) flistxattr(r0, &(0x7f00000001c0)=""/55, 0x37) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xedc000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc775, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) r2 = syz_io_uring_complete(r1) syz_io_uring_setup(0x1558, &(0x7f0000000000)={0x0, 0x8af3, 0x10, 0x1, 0x281, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r3, 0x6, 0x0) getdents(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r3, 0xee) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x80010, r3, 0x10000000) 18:47:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB="28cf2eddfcdfa9b5923a1d6f1943e4224805e6f4f8cb7d70e1101260cad6b4591758847832a95abc0b152ffb30d306000000000000007d889093f2203e115f80227afd024ae8d067"]) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x0, @perf_bp={0x0, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="e2be8813eb4c332a3d57af72b0f9e9950624f72fad4e766dc17c0663453c971a1488fb70c4ef6c7e2ca25e383851044329f75b295fb3779bc7546cd617094cc10ee45519cd85b3e17d4aff0b99171fa8b80c30e00040ad8d6b273ea07884ecd8c93fb0417a6947bdfbcae11a9e13164abcd55c7b55556b5ce5e54507762672e38526adac0fa5594c059cbf404ec5017fcb6d4650b46b764b39d2f715cc963130fdb9ff2fed61d60360eaa70d7bb2ac49fece410d92d56eaf609e1cfc8e1595400e970e77387372a3dbb58ce65fffbee9d04fa436a3e2063579256471", @ANYRES16=r0, @ANYBLOB="0b0d0008000182ebc2d21e67beef971ed2efacf14c48017c9cd55beedec4b4d98bdd0fea5843b393f0cc349827b4144017fca6731cb04abb1c69e1fdf51e063407756c4c3143d30b002be082f13809b1b177214f8a36e331d5ac", @ANYRESDEC=r1, @ANYBLOB], 0x20}}, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x8, 0x3, 0xff, 0x8, 0x0, 0x942, 0x9000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x11088, 0x4, 0x7a, 0x1, 0xbe, 0xfffff18e, 0x9, 0x0, 0x5, 0x0, 0x8}, 0x0, 0xa, r2, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r4 = getpid() r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x34240, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x3, 0x90, 0x4, 0x8, 0x0, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x200, 0x400}, 0x1044, 0x1, 0xfff, 0x4, 0x9, 0x6, 0x20, 0x0, 0x7, 0x0, 0x6}, r4, 0xe, r6, 0x8) fsopen(&(0x7f0000000000)='rootfs\x00', 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x1f, 0x1, 0x7, 0x0, 0x8001, 0x20000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x56250, 0x1, 0x8001, 0xb, 0x8, 0x7, 0x591, 0x0, 0x63}, 0x0, 0x3, r0, 0x2) write(r3, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:47:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x3f0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:47:52 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x8000002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYBLOB="010100000018000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file1\x00']) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:47:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:47:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:05 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x10000, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0xffffff41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2000) r2 = syz_io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x68ba, 0x0, 0x0, 0xf5, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) fdatasync(r0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB, @ANYBLOB=',']) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:48:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffe4, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:48:05 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/raw\x00') write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB="a89c6c11d27432f5e17a6896d1a839f29a9369000000"]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38b, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000300)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x7ffffff7) syz_io_uring_setup(0x318c, &(0x7f0000000140)={0x0, 0x6168, 0x8, 0x1, 0x293, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) 18:48:05 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000d8"]) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0xf8, 0x5, 0x0, 0x0, 0x7, 0x1600, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x14410, 0x7, 0x1, 0x8, 0xfffffffffffffffd, 0xfffffffd, 0x7fff, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xf1c8, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000240)={0x3, 0x200, 0xfff, 0x1, 0x80, 0x274}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x8000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x8, 0x47, 0x10, 0x0, 0x7, 0x4400c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp, 0x1000, 0x3, 0x80000001, 0x3, 0x5, 0xc0c, 0x0, 0x0, 0x2}, 0x0, 0x3, r0, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:48:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xe0ffff00000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x100000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:06 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x101, 0x10000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) syz_io_uring_setup(0x1102, &(0x7f0000000440)={0x0, 0x8607, 0x10, 0x2, 0x227, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000000c0)) write(r1, &(0x7f0000000080)="01", 0x41030) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x7ffffff7) getdents(r4, &(0x7f00000001c0)=""/29, 0x1d) syz_io_uring_setup(0x227d, &(0x7f0000000380)={0x0, 0xc777}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 18:48:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0)) 18:48:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffff4, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:48:06 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2402, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file2\x00', 0x101042, 0x4c) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000006000000bf0600000200000007dfffff04000001000000800600650c"], 0x101080) write(r1, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x2400, 0x148) 18:48:06 executing program 4: setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000480)=@v1={0x1000000, [{0x9, 0x7fffffff}]}, 0xc, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3d, 0x1000}, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@bar={{}, {0x7}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0xe, {0x3, 0x9}, "ca4f548bfc52dacf"}, {0x0, 0x1, {0x8, 0x8}, "b32d9daf05da294d"}, {0x0, 0xa, {0x1}, "9a470fef2f8f1e0e"}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c050}, 0x48c5) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000200)) r5 = syz_io_uring_complete(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1a4, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x6d, 0xac, "c925fdb693071d7ca75cd0d1c4f201c02e291a9fd9f26d15e224324e98ce48be641dbacc970bb9b5adc2311a8fb24758fa53c42687ecf9537e76e8f68e27e72c5b5b7b97242a2a158643df05648726e20c345e2c303609273b371ade68849b3c1c656f30c3e47f19b8"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, [{0x9}, {0xc, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x6c}, {0x3, 0x1}, {0x5, 0x1}, {0x36, 0x1}, {0xa01301ef4a6beb63}, {0x60, 0x1}, {0xb, 0x1}, {0xf501c6fecdc81dba}, {0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x6c, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0x5}, {0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x40a}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xec, 0xac, "ff41588e184148a0a9a2cba6ade877d6e6e286d69058d38ba6c8d890f0914dcb9441e50095a5724922b3d7b44617a8255e461120d1da203b8d7edcc275820e81f982d09c42533ef9033b7a704d30151cf87ac44135de9e572e85a8f3a9fff185f9bea354b332c20b3b28870134947dbec19bb6233cd7abba14f9cf2cdafe079020b93b6d3055ca104fc84f3033ee50633d63973ec6e90a1d2083fbd196f295f45cd294e99433475140ec5ef568194ea91da296f4dacfc78f096e936356c953929944e31784eb2909b511b98e901ba553d6fc83ebdd819392173ba2654d65998b406400a41e14f6e8"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44800) 18:48:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:24 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x134, r1, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0xfb, 0xc5, "0e5df54ba5cf742facd92d5f67b6ed73299d8863323b70089aeeb3d686ae7cc07826b62b5d8428781c4163ae77f210181b2b82015df2b927d100923d8c226ec09d077a2599db86266282752ef705715614fe47ef79c14445c3132cba5b540e3ab8268d078ed38b07444d3c774d0874d1e489b5b2a6fbf8b012bb9456bf8ea6ac0aa8d3726b5641f462318607f8f79542d68c5408a869a178fa15b8f0e90dd4cb1aeaa077d915f43fa3e3a40f6cf75adde1911619fa79d6e8b7ad5f49ea2bfc39f1529ff7e3d834a3b5aa60bba731dffabf2e7e2042f60468bd5fb6e4121b92f157132cddafe09d23e0e9fc2379c515ebf576c2e9ae9443"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x200}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x48) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r2, 0x8000000) write(r2, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2000, @fd=r5, 0x7, 0x7, 0x53f, 0x0, 0x1, {0x3}}, 0x5c2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e9e9b7b6bb70445e4676314f944d84d194acb23c795f7eeaf4f5076f5c15e557b43558a52a3ec6d74577d6ee1198412832472db6e729decfc5adeb510681764a50f5e0ccfc4fed5ce722709831b70cbcb9cdfb08e6375d982b90df59a6b777c6be9e09b3fce1d2b78319b81a1614a4927c783b2e51149d76e00d8fe3ab263d4e06d64a581837f7454df31227317115442b5136803f58", @ANYRESHEX=r6, @ANYBLOB="4e0f1130053f1e8ed52e7f147c58c28fbf5bc35767bb3de3d4d538dd25e6ae1c34fb4346a7ead643e028e6aeab3944be9ed8397426a1aa", @ANYBLOB=',']) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x242140, 0x30) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x2901, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) creat(&(0x7f0000000000)='./file1\x00', 0x100) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:48:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:48:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1, 0x9, 0x20, 0x0, 0xfffffffeffffffff, 0x40000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6, 0x1}, 0x8000, 0x200000000000000, 0x122, 0x0, 0x4, 0x8, 0xfbf, 0x0, 0xffffffff, 0x0, 0x2}, 0xffffffffffffffff, 0x9, r0, 0x9) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x9, 0x5, 0xaa, 0x8, 0x0, 0x101, 0x99d8be93bb2d7657, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1000, 0x401}, 0x544, 0x1f, 0x52ce2188, 0x4, 0x0, 0x2, 0x4, 0x0, 0x8, 0x0, 0x200}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) open_tree(r1, &(0x7f00000000c0)='./file1\x00', 0x1800) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x300000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x8, 0x4}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000000)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:48:24 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000480)=0xc) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x1, 0x6, 0x7f, 0xaa, 0x0, 0x5, 0x4, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x75f6, 0x1, @perf_config_ext={0x1000, 0x8}, 0x800, 0x4, 0x10001, 0xe, 0x3ff, 0xf0, 0x7aad, 0x0, 0x3, 0x0, 0x7}, r1, 0x5, r0, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x80, 0x1, 0x6, 0x0, 0xbb, 0xc4d0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x3ff, 0x80000000000000}, 0x20, 0x7, 0x40, 0x1, 0x4, 0x1, 0x1, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', '\x00'}, &(0x7f0000000380)=""/103, 0x67) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r2, 0x8000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000070280)={0x0, [], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058700)={0x5, [], 0x47, "336d3a794619d7"}) write(r2, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x4000, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:25 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x49) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x20c777, 0x2, 0x1, 0xfffffffe}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000200)) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9) syz_io_uring_setup(0x12e8, &(0x7f0000000240)={0x0, 0x7152, 0x6, 0x1, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)) 18:48:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x80, 0x4, 0x81, 0x0, 0x8, 0x10020, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0xe3a, 0x1, 0x2, 0x0, 0x4, 0x9, 0x0, 0xdf6, 0x0, 0x800}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="15", @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x400000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x2a02, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x6, 0x0) getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) openat(r1, &(0x7f0000000000)='./file1\x00', 0x70001, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:48:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xe3, 0x80, 0x2, 0x2, 0x0, 0x33, 0x50181, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000000c0), 0xd}, 0x40, 0x8db, 0x101, 0x4, 0x7fff, 0x9, 0xff17, 0x0, 0xfffffff8}, r3, 0x4, r1, 0x1) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="87970eacfbc4d496a013fa7a6cb4f6a240aa7fe9e93b7adf1fac01000100d6", @ANYRESHEX=r1, @ANYBLOB, @ANYBLOB="9cfb95a4f8"]) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x500000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0x6, 0x0) getdents(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r2, 0xee) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2200000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c706f73697861636c2c63616368653d6c6f6f73652c706f73697861636c2c6f626a5f726f6c653d5b2c7365636c6162656c2c0080c19f5a45bb13ab41315bb8fa5428e5d2efe27d3163d8d394c50d50279c2c271b3540cb5fc85d688dcde5b0595806dc788bea03055b561f9bc8ee2d821101797328bd7f191a4b2c99ba891b7c65521a4563fe537f44a68be810abd704"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) 18:48:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:48:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101402, 0x2e6ba132b0f852de) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x6, 0x0) symlinkat(&(0x7f0000000240)='./file1\x00', r1, &(0x7f0000000280)='./file1\x00') getdents(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0xee) syz_io_uring_setup(0x3d31, &(0x7f0000000000)={0x0, 0x79b6, 0x8, 0x1, 0x228, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) 18:48:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x600000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x700000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffe, 0x0) r1 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0xd0580, 0x61) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file1\x00', r1) 18:48:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0xfffffffffffffcd2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x7ffffff7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x20010, r2, 0x0) r3 = accept$inet(r1, 0x0, &(0x7f0000000000)) write(r3, &(0x7f0000000400)="7917c4cb5db8de26c02bed62ca556fa810e08132544296d998a71eca7c856bc99a48783b68888e9406465f79dcfcb3ea6159ce07325e515f7506739460b5aa8b48420057ffb5860044a01fa8c73b7841715273a945bff62d1ca47c4cd473bf0e1d16bfbca8a10bb2c02d083aac9666a1b51d95aab70a22fda3803e6069a28b123d2037dd18cf0fd7f5574e713dae213a421f84455d8b", 0x96) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="75274385c7a2869251", @ANYRESHEX=r4, @ANYBLOB="08c2fbfea8adb189c7c56d830000000000", @ANYBLOB="2c38bf7ef567d3e3eb88343915e32053bec009211aea706600000053f9f23e31b728753c27db67a25c20a4602480fdf9185089e55c7bc80abc8e2794aadc0a704e5dc5ff4ea3e4baf8f8694227f135ce969faedae0b45a0b9083ea74240ec910ab49ba760a5a3e10e09d47a23cc5eb42d7e39d4ebde034567068f34179b229823942a882751b0d65bce8832a52b929690a6e370fe7c0448394e94770048818680fbc5c3273e738146409e634da68aa2283e66f9d485f423bc86a51cccd118c47b7e298274fa9090000005a2387e9cf7dfed1608e121d15f46d9063d9ae9585966621dfc121ea"]) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:43 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) pwrite64(r1, &(0x7f00000000c0)="80f591d34e80a844a8d4bfe05225dab999732793d19cdaa646816edd9ab6206ed7eccd6c1ac590809882e26d69b6a94d0a0f5dfddb329977064ca6c4335d", 0x3e, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) pwritev(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='t', @ANYBLOB, @ANYBLOB]) syz_io_uring_setup(0x7b64, &(0x7f0000000000)={0x0, 0xa38d, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)) 18:48:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x50, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) 18:48:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9, 0x5, 0x80, 0x79, 0x0, 0x80, 0x40818, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x91, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x42, 0x6, 0x8000, 0x6, 0x0, 0x100, 0xffff, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xc, r0, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r1, 0x8000000) write(r1, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB, @ANYBLOB=',']) socket$inet6_udp(0xa, 0x2, 0x0) 18:48:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x9, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000380)="ab79caf469e3329b50e764669e801167056b22ab0a6a7dee7d7603652e001b54d6b26f941945d3058f7c4dd490e3debb5235afe1fde158580364f382d96bfd03a83d67e09336e6ae4f279df345b1cd8dde7ccb03e9", 0x55, 0x8f}, {&(0x7f0000000400)="f6386acea34a3588cdfe6eb4a3d65def3938a81ab1e8e4fdaae82614d871bfbe2ffa0b9acdce66296f54db33d46b588c99b5fbc2e8cac8", 0x37, 0xf247}, {&(0x7f0000000440)="fde31418127de548932724bf1e128b4f13cf7f4af797cee9362efe4c05c3f3e799dbed55432d9675f5b5575b34b93b419f1d307b50d677d9e57a504a743c34d0e12727d48270f21df32c32fb9af3c2d4f53cc39b2586f2b9981d3a08c9d623f1bd0609a7fca4cfd2cc0de5c7fae53641c79f49e8d0", 0x75, 0x3}, {&(0x7f00000004c0)="2c1143d10f981d3578e2831c9c2182b72041a79e2654084e0e7a973f903de1", 0x1f, 0x1ff}, {&(0x7f0000000500)="cf6a506ea6ab0dee16f9adc11bfcb33f2156b28b0fc5d11eb707e1c8d1e8e294ee78061b6c07fb79d7113d508bbbdf5f0dff30bc6fef015aab29b56e04889a22514be082920396cbd7e4a250586e9468785824fec9b7edd7abd9903da950844fb7d6f37eb4ec44", 0x67, 0x9}, {&(0x7f0000000580), 0x0, 0x101}], 0x60000, &(0x7f0000000680)={[{@nogrpid}, {@noacl}, {@mblk_io_submit}, {@nodiscard}, {@i_version}, {@errors_continue}, {@dioread_nolock}, {@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@discard}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0x6, 0x0) getdents(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x10, r2, 0xee) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x7, 0x52, 0xfc, 0x0, 0x2, 0x4c, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8cc8, 0x1, @perf_config_ext={0x6, 0x3}, 0x10230, 0xe9, 0x8, 0x3, 0x1, 0x80000001, 0xb8, 0x0, 0x6, 0x0, 0x1ff}, r1, 0xffffffffffffffff, r2, 0x3) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write(r3, &(0x7f0000000080)="01", 0x41030) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000200)) 18:48:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2000000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 18:48:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x6600, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8000000) write(r0, &(0x7f0000000080)="01", 0x41030) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0xc777, 0x1, 0x0, 0x13e}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000002c0)}], 0x1, 0x7fffffe, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61616769633d30382c646f6e745f716561737572652c0080de03c0cf98b55e514f41283ad3a548e677257f468e842e333cd870378bbc2536fcfc14ded71498a5f0c6447b3384b145e05d3070795c494f5e5ac192b17077161334d1ead8a3e11adc758e323dca00647de0dc422f9e58f617bb16044d8cee46573f5b6a8b9be9bd5ea6fd7659e6bc99b51364ac167a453831e3a8403f4cc964f4f432c4087edfc44f02440f83b0ca7c63e0b02338dfa64eb17fb626e557392d45127ff2be8d53db8c78da40252612f675f54ed97a9eea1e653b2ee47e14e170009c1e55c6a07021465b78b5832f32e0cf8bd2a0f23dcdb06d1885e6c7fa0000000000000000"]) syz_io_uring_setup(0x7b64, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) [ 3160.794749] loop4: detected capacity change from 0 to 242 [ 3160.893709] loop4: detected capacity change from 0 to 242 VM DIAGNOSIS: 18:53:50 Registers: info registers vcpu 0 RAX=ffffffff8420ba80 RBX=ffffffff85232900 RCX=ffffffff841ed912 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85207e18 R8 =0000000000000001 R9 =ffff88806ce33b53 R10=ffffed100d9c676a R11=0000000000000001 R12=fffffbfff0a46520 R13=ffffffff85aee190 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8420ba8b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5dc2bf7010 CR3=0000000018790000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 000e03fe016c6c6f 502e726567616e61 YMM02=0000000000000000 0000000000000000 006e656720636578 65080a0100010101 YMM03=0000000000000000 0000000000000000 78650d0065676169 727420636578650b YMM04=0000000000000000 0000000000000000 6578650a00657a69 6d696e696d206365 YMM05=0000000000000000 0000000000000000 696820636578650a 006873616d732063 YMM06=0000000000000000 0000000000000000 0073646565732063 6578650a0073746e YMM07=0000000000000000 0000000000000000 65786509006c6174 6f7420636578650a YMM08=0000000000000000 0000000000000000 6761697274206365 78650b006e656720 YMM09=0000000000000000 0000000000000000 657a696d696e696d 20636578650d0065 YMM10=0000000000000000 0000000000000000 78650a006873616d 7320636578650a00 YMM11=0000000000000000 0000000000000000 7320636578650a00 73746e6968206365 YMM12=0000000000000000 0000000000000000 6c61746f74206365 78650a0073646565 YMM13=0000000000000000 0000000000000000 6578650e007a7a75 6620636578650900 YMM14=0000000000000000 0000000000000000 6578651100657461 6469646e61632063 YMM15=0000000000000000 0000000000000000 0000737472617473 657220726f747563 info registers vcpu 1 RAX=ffffffff8420ba80 RBX=ffff88800865d040 RCX=ffffffff841ed912 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88800868fe58 R8 =0000000000000001 R9 =ffff88806cf33b53 R10=ffffed100d9e676a R11=0000000000000001 R12=ffffed10010cba08 R13=ffffffff85aee190 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8420ba8b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d1a2ea2648 CR3=0000000018790000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000500000004 0000000300000002 YMM02=0000000000000000 0000000000000000 696e696d20636578 650d0a0100010101 YMM03=0000000000000000 0000000000000000 73746e6968206365 78650a00657a696d YMM04=0000000000000000 0000000000000000 78650b0073646565 7320636578650a00 YMM05=0000000000000000 0000000000000000 7563657865110065 6761697274206365 YMM06=0000000000000000 0000000000000000 7865080073747261 7473657220726f74 YMM07=0000000000000000 0000000000000000 7a75662063657865 09006e6567206365 YMM08=0000000000000000 0000000000000000 20636578650a0065 7a696d696e696d20 YMM09=0000000000000000 0000000000000000 6465657320636578 650a0073746e6968 YMM10=0000000000000000 0000000000000000 1100656761697274 20636578650b0073 YMM11=0000000000000000 0000000000000000 7472617473657220 726f747563657865 YMM12=0000000000000000 0000000000000000 65786509006e6567 2063657865080073 YMM13=0000000000000000 0000000000000000 6e61632063657865 0e007a7a75662063 YMM14=0000000000000000 0000000000000000 616d732063657865 0a00657461646964 YMM15=0000000000000000 0000000000000000 00006c61746f7420 636578650a006873