rite$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)

00:50:09 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:22 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x9f030000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:22 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c0000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:22 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:22 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:50:22 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:22 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0)

00:50:22 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:35 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xf202000000000000, 0x0, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:50:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0)

00:50:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)

00:50:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:50:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x300000000000000, 0x0, 0x0)

00:50:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:35 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)

00:50:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:48 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x37b)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:48 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:48 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:48 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4e2d0000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:48 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)

00:50:48 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:50:48 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:48 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:48 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:50:48 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:50:49 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8a030000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:50:49 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0)

00:51:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:03 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:03 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:51:03 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c0000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:03 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

00:51:03 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:03 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:04 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3e03000000000000, 0x0, 0x0)

00:51:04 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:51:04 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:04 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:51:04 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:04 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:04 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:04 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)

00:51:04 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:04 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:04 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(0x0, 0xb)

00:51:04 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:04 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)

00:51:18 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)

00:51:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:18 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2c5f)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:18 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:18 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(0x0, 0xb)

00:51:18 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:18 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:31 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(0x0, 0xb)

00:51:31 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:31 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2f2)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:31 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:31 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xd52c000000000000, 0x0, 0x0)

00:51:31 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:31 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:51:31 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x300000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:31 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:31 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:31 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

00:51:31 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)

00:51:31 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:31 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:31 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:31 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:31 executing program 1:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x0, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:51:31 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5f2c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:31 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

00:51:31 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)

00:51:31 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)

00:51:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:44 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

00:51:44 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7b03)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:44 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:44 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x300000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:44 executing program 1:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x0, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:51:44 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:44 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)

00:51:58 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)

00:51:58 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:58 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:58 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:58 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:58 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:58 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:58 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:58 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:58 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:51:58 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)

00:51:58 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x310)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:58 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:58 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:58 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:58 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:58 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:51:58 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:51:58 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3e030000, 0x0, 0x0, 0x0)

00:51:58 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

00:51:59 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:51:59 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:14 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:14 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x295c)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:14 executing program 1:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000, 0x0, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:14 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x33e)

00:52:14 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)

00:52:14 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x56dfff7f00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:14 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:14 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x0, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:52:14 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:52:14 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:14 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)

00:52:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1003)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:27 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:27 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:27 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:27 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)

00:52:27 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x942c000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:27 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:27 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:52:27 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)

00:52:27 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0)

00:52:27 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3000000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:27 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a2b)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:27 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:27 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4e2d000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:27 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

00:52:27 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x9f03000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:27 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2d4e, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:27 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:27 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x0, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:52:27 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:40 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5c29)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:40 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x0, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:52:40 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:40 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:40 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2cd5)

00:52:40 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:40 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8a03000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:40 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2b2a)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:40 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3e03)

00:52:40 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:53 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:53 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:53 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:53 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2c94, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:53 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:53 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:53 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)

00:52:53 executing program 1:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:52:53 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5f2c0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:53 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0x0, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:52:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:54 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:54 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)

00:52:54 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:54 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0x0, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:52:54 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf202)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:52:54 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7b030000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:54 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)

00:52:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:52:54 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:52:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x0, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:05 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:05 executing program 1:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:53:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:05 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:05 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd52c)

00:53:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:05 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:05 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000)

00:53:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:05 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:06 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:06 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0xcc0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:17 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:17 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000)

00:53:17 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/50, 0x32}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:53:17 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:17 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:17 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/50, 0x32}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:53:17 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:17 executing program 1:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/50, 0x32}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:53:17 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000)

00:53:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:18 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:29 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:29 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:29 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:29 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)

00:53:29 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:29 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:29 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x39f)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:29 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:30 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:30 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:30 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:30 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10030000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:30 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:30 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:30 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)

00:53:44 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)

00:53:44 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x38a)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:44 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:44 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:44 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a2b0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:44 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:44 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:53:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)

00:53:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:44 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb) (fail_nth: 1)

00:53:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:44 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:44 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:44 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

[ 2802.499295] FAULT_INJECTION: forcing a failure.
[ 2802.499295] name failslab, interval 1, probability 0, space 0, times 0
[ 2802.502200] CPU: 0 PID: 14649 Comm: syz-executor.3 Not tainted 5.10.177 #1
[ 2802.503665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2802.505388] Call Trace:
[ 2802.505952]  dump_stack+0x107/0x167
[ 2802.506718]  should_fail.cold+0x5/0xa
[ 2802.507537]  ? getname_flags.part.0+0x50/0x4f0
[ 2802.508497]  should_failslab+0x5/0x20
[ 2802.509302]  kmem_cache_alloc+0x5b/0x310
[ 2802.510168]  getname_flags.part.0+0x50/0x4f0
[ 2802.511120]  user_path_at_empty+0xa1/0x100
[ 2802.512032]  __x64_sys_umount+0xf8/0x190
[ 2802.512896]  ? path_umount+0x1170/0x1170
[ 2802.513774]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2802.514895]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2802.516028]  do_syscall_64+0x33/0x40
[ 2802.516824]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2802.517924] RIP: 0033:0x7ff9cf26bb19
[ 2802.518724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2802.522623] RSP: 002b:00007ff9cc7e1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2802.524269] RAX: ffffffffffffffda RBX: 00007ff9cf37ef60 RCX: 00007ff9cf26bb19
[ 2802.525798] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000080
[ 2802.527316] RBP: 00007ff9cc7e11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2802.528845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2802.530364] R13: 00007fffe4795eaf R14: 00007ff9cc7e1300 R15: 0000000000022000
00:53:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

00:53:44 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2c94)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:56 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:53:56 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:56 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3e030000)

00:53:56 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb) (fail_nth: 2)

00:53:56 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:56 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:56 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:53:56 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

[ 2814.559593] FAULT_INJECTION: forcing a failure.
[ 2814.559593] name failslab, interval 1, probability 0, space 0, times 0
[ 2814.562200] CPU: 0 PID: 14711 Comm: syz-executor.3 Not tainted 5.10.177 #1
[ 2814.563612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2814.565303] Call Trace:
[ 2814.565849]  dump_stack+0x107/0x167
[ 2814.566593]  should_fail.cold+0x5/0xa
[ 2814.567382]  ? create_object.isra.0+0x3a/0xa20
[ 2814.568311]  should_failslab+0x5/0x20
[ 2814.569084]  kmem_cache_alloc+0x5b/0x310
[ 2814.569905]  ? lock_downgrade+0x6d0/0x6d0
[ 2814.570738]  create_object.isra.0+0x3a/0xa20
[ 2814.571631]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2814.572656]  kmem_cache_alloc+0x159/0x310
[ 2814.573498]  getname_flags.part.0+0x50/0x4f0
[ 2814.574386]  user_path_at_empty+0xa1/0x100
[ 2814.575240]  __x64_sys_umount+0xf8/0x190
[ 2814.576076]  ? path_umount+0x1170/0x1170
[ 2814.576900]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2814.577964]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2814.579000]  do_syscall_64+0x33/0x40
[ 2814.579762]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2814.580792] RIP: 0033:0x7ff9cf26bb19
[ 2814.581540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2814.585234] RSP: 002b:00007ff9cc7e1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2814.586763] RAX: ffffffffffffffda RBX: 00007ff9cf37ef60 RCX: 00007ff9cf26bb19
[ 2814.588207] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000080
[ 2814.589640] RBP: 00007ff9cc7e11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2814.591069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2814.592506] R13: 00007fffe4795eaf R14: 00007ff9cc7e1300 R15: 0000000000022000
00:53:56 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:56 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:53:56 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:54:09 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:09 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x942c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:09 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:09 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:09 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb) (fail_nth: 3)

00:54:09 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)

[ 2827.793997] FAULT_INJECTION: forcing a failure.
[ 2827.793997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2827.796730] CPU: 1 PID: 14763 Comm: syz-executor.3 Not tainted 5.10.177 #1
[ 2827.798112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2827.799803] Call Trace:
[ 2827.800337]  dump_stack+0x107/0x167
[ 2827.801068]  should_fail.cold+0x5/0xa
[ 2827.801833]  strncpy_from_user+0x34/0x470
[ 2827.802668]  getname_flags.part.0+0x95/0x4f0
[ 2827.803557]  user_path_at_empty+0xa1/0x100
[ 2827.804404]  __x64_sys_umount+0xf8/0x190
[ 2827.805212]  ? path_umount+0x1170/0x1170
[ 2827.806031]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2827.807089]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2827.808129]  do_syscall_64+0x33/0x40
[ 2827.808891]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2827.809920] RIP: 0033:0x7ff9cf26bb19
[ 2827.810665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2827.814449] RSP: 002b:00007ff9cc7e1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2827.815984] RAX: ffffffffffffffda RBX: 00007ff9cf37ef60 RCX: 00007ff9cf26bb19
[ 2827.817403] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000080
[ 2827.818832] RBP: 00007ff9cc7e11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2827.820263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2827.821708] R13: 00007fffe4795eaf R14: 00007ff9cc7e1300 R15: 0000000000022000
[ 2827.836884] FAULT_INJECTION: forcing a failure.
[ 2827.836884] name failslab, interval 1, probability 0, space 0, times 0
[ 2827.839627] CPU: 1 PID: 14775 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2827.841030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2827.842776] Call Trace:
[ 2827.843326]  dump_stack+0x107/0x167
[ 2827.844132]  should_fail.cold+0x5/0xa
[ 2827.844896]  ? getname_flags.part.0+0x50/0x4f0
[ 2827.845857]  should_failslab+0x5/0x20
[ 2827.846635]  kmem_cache_alloc+0x5b/0x310
[ 2827.847501]  getname_flags.part.0+0x50/0x4f0
[ 2827.848397]  getname_flags+0x9a/0xe0
[ 2827.849166]  do_mkdirat+0x8f/0x2b0
[ 2827.849894]  ? user_path_create+0xf0/0xf0
[ 2827.850745]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2827.851828]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2827.852879]  do_syscall_64+0x33/0x40
[ 2827.853634]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2827.854682] RIP: 0033:0x7f0ce482cb19
[ 2827.855461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2827.859209] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2827.860780] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2827.862247] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2827.863711] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2827.865160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2827.866622] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:54:09 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:09 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)

00:54:09 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x9f03)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:09 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:09 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2d4e)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:09 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:54:09 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb) (fail_nth: 4)

00:54:10 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5f2c000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

[ 2828.107026] FAULT_INJECTION: forcing a failure.
[ 2828.107026] name failslab, interval 1, probability 0, space 0, times 0
[ 2828.109141] CPU: 0 PID: 14819 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2828.110255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2828.111610] Call Trace:
[ 2828.112041]  dump_stack+0x107/0x167
[ 2828.112629]  should_fail.cold+0x5/0xa
[ 2828.113247]  ? create_object.isra.0+0x3a/0xa20
[ 2828.113985]  should_failslab+0x5/0x20
[ 2828.114585]  kmem_cache_alloc+0x5b/0x310
[ 2828.115223]  ? ksys_write+0x21a/0x260
[ 2828.115842]  create_object.isra.0+0x3a/0xa20
[ 2828.116537]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2828.117317]  kmem_cache_alloc+0x159/0x310
[ 2828.117986]  getname_flags.part.0+0x50/0x4f0
[ 2828.118680]  getname_flags+0x9a/0xe0
[ 2828.119261]  do_mkdirat+0x8f/0x2b0
[ 2828.119841]  ? user_path_create+0xf0/0xf0
[ 2828.120500]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2828.121319]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2828.122130]  do_syscall_64+0x33/0x40
[ 2828.122723]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2828.123548] RIP: 0033:0x7f0ce482cb19
[ 2828.124133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2828.127032] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2828.128233] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2828.129375] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2828.130510] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2828.131642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2828.132755] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
[ 2828.139169] FAULT_INJECTION: forcing a failure.
[ 2828.139169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2828.144039] CPU: 1 PID: 14821 Comm: syz-executor.3 Not tainted 5.10.177 #1
[ 2828.145439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2828.147098] Call Trace:
[ 2828.147649]  dump_stack+0x107/0x167
[ 2828.148386]  should_fail.cold+0x5/0xa
[ 2828.149170]  _copy_to_user+0x2e/0x180
[ 2828.149966]  simple_read_from_buffer+0xcc/0x160
[ 2828.150904]  proc_fail_nth_read+0x198/0x230
[ 2828.151779]  ? proc_sessionid_read+0x230/0x230
[ 2828.152695]  ? security_file_permission+0x24e/0x570
[ 2828.153700]  ? perf_trace_initcall_start+0x101/0x380
[ 2828.154730]  ? proc_sessionid_read+0x230/0x230
[ 2828.155685]  vfs_read+0x228/0x580
[ 2828.156386]  ksys_read+0x12d/0x260
[ 2828.157093]  ? vfs_write+0xa70/0xa70
[ 2828.157847]  ? ksys_read+0x260/0x260
[ 2828.158614]  do_syscall_64+0x33/0x40
[ 2828.159378]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2828.160423] RIP: 0033:0x7ff9cf21e69c
[ 2828.161176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2828.164909] RSP: 002b:00007ff9cc7e1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2828.166449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9cf21e69c
[ 2828.167924] RDX: 000000000000000f RSI: 00007ff9cc7e11e0 RDI: 0000000000000005
[ 2828.169377] RBP: 00007ff9cc7e11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2828.170839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2828.172292] R13: 00007fffe4795eaf R14: 00007ff9cc7e1300 R15: 0000000000022000
00:54:10 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:22 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:54:22 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:22 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)

00:54:22 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:22 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5c290000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:22 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7b03000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:22 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

[ 2840.563033] FAULT_INJECTION: forcing a failure.
[ 2840.563033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2840.565762] CPU: 1 PID: 14859 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2840.567191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2840.568932] Call Trace:
[ 2840.569494]  dump_stack+0x107/0x167
[ 2840.570259]  should_fail.cold+0x5/0xa
[ 2840.571065]  strncpy_from_user+0x34/0x470
[ 2840.571961]  getname_flags.part.0+0x95/0x4f0
[ 2840.572869]  getname_flags+0x9a/0xe0
[ 2840.573638]  do_mkdirat+0x8f/0x2b0
[ 2840.574362]  ? user_path_create+0xf0/0xf0
[ 2840.575219]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2840.576302]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2840.577351]  do_syscall_64+0x33/0x40
[ 2840.578113]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2840.579163] RIP: 0033:0x7f0ce482cb19
[ 2840.579922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2840.583696] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2840.585253] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2840.586705] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2840.588163] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2840.589614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2840.591068] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:54:35 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7fffce99)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:35 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x2e)

00:54:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd52c0000)

00:54:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:35 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

[ 2853.243555] FAULT_INJECTION: forcing a failure.
[ 2853.243555] name failslab, interval 1, probability 0, space 0, times 0
[ 2853.246931] CPU: 0 PID: 14895 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2853.248567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2853.250265] Call Trace:
[ 2853.250815]  dump_stack+0x107/0x167
[ 2853.251564]  should_fail.cold+0x5/0xa
[ 2853.252362]  ? __d_alloc+0x2a/0x990
[ 2853.253107]  ? __d_alloc+0x2a/0x990
[ 2853.253873]  should_failslab+0x5/0x20
[ 2853.254655]  kmem_cache_alloc+0x5b/0x310
[ 2853.255480]  ? __d_lookup+0x3bf/0x760
[ 2853.256271]  __d_alloc+0x2a/0x990
[ 2853.256993]  d_alloc+0x46/0x1c0
[ 2853.257677]  __lookup_hash+0xcc/0x190
[ 2853.258459]  filename_create+0x186/0x4a0
[ 2853.259278]  ? filename_parentat+0x570/0x570
[ 2853.260196]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2853.261145]  do_mkdirat+0xa2/0x2b0
[ 2853.261877]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 2853.262976]  ? user_path_create+0xf0/0xf0
[ 2853.263830]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2853.264913]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2853.265952]  do_syscall_64+0x33/0x40
[ 2853.266727]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2853.267789] RIP: 0033:0x7f0ce482cb19
[ 2853.268566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2853.272289] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2853.273870] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2853.275336] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2853.276815] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2853.278270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2853.279739] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:54:35 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:54:35 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x99ceff7f)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:35 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000e000000ffff00000002040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1f, 0x20, 0x70bd27, 0x25dfdbff, {0xd}, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x425}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048811}, 0x80800)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:54:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4e2d)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

[ 2853.464626] FAULT_INJECTION: forcing a failure.
[ 2853.464626] name failslab, interval 1, probability 0, space 0, times 0
[ 2853.467213] CPU: 0 PID: 14929 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2853.468642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2853.470343] Call Trace:
[ 2853.470891]  dump_stack+0x107/0x167
[ 2853.471645]  should_fail.cold+0x5/0xa
[ 2853.472451]  ? create_object.isra.0+0x3a/0xa20
[ 2853.473387]  should_failslab+0x5/0x20
[ 2853.474176]  kmem_cache_alloc+0x5b/0x310
[ 2853.475009]  create_object.isra.0+0x3a/0xa20
[ 2853.475921]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2853.476966]  kmem_cache_alloc+0x159/0x310
[ 2853.477812]  ? __d_lookup+0x3bf/0x760
[ 2853.478595]  __d_alloc+0x2a/0x990
[ 2853.479303]  d_alloc+0x46/0x1c0
[ 2853.479987]  __lookup_hash+0xcc/0x190
[ 2853.480767]  filename_create+0x186/0x4a0
[ 2853.481598]  ? filename_parentat+0x570/0x570
[ 2853.482497]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2853.483457]  do_mkdirat+0xa2/0x2b0
[ 2853.484207]  ? user_path_create+0xf0/0xf0
[ 2853.485065]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2853.486139]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2853.487198]  do_syscall_64+0x33/0x40
[ 2853.487978]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2853.489038] RIP: 0033:0x7f0ce482cb19
[ 2853.489792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2853.493570] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2853.495151] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2853.496621] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2853.498086] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2853.499548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2853.501013] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:54:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)

00:54:35 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:35 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:48 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:48 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)

00:54:48 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:48 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r6, r7+60000000}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x40)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:48 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8a03)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:48 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:54:48 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e00)={0x1568, 0x12, 0x4, 0x70bd28, 0x25dfdbfb, {0x1c}, [@generic="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", @generic="e38ba982b7cac25a868d8c6946f18894033218dbeab26e2a2d3f9696063ee3436fdb322f2344139b3245624606410d1a8f708fb073bd9aa2291f231346d9fbfbf3041d34f0b960239d0b805732fc56ed3fec633c9b33a4b0cc9719118af9c4ae5a4795783d6528ef96d68f7cf4a4f2b4b4b8566419320720756cd43fd288987060efd2efcd630eeb14a030e99e6607b6caac8906313ac6fb46f746daacd270256e62142bc6122db8a12f", @generic="3ed6f1e8c354fa0d139eaade46620b8146559a95b35969a7fff49b885a81817b122936260d0367b763b05ab007f1367e54", @nested={0x1b6, 0x8, 0x0, 0x1, [@generic="b967072d1f6ddda47d27080db5e8134a166dd1a9d1a6d2025d09a952adadc539aef78095c65d8460bf46d35793f68d5416869aef63a35327744ee5962d02c436e0c4e4318c6760b32062c74fccbcabccb267e86fb017275ddb3410141f075d28b0256907ea4e87c73d2078e9cbcb470c2121fdfe2fe5cdce699b366c7084a62e4238551defeac6af2f", @generic="88ffe1f8c14870642895cb079e9d43689abc18bd074160db753a0a7b1d", @generic="51f65a3aa8bdc31fe3df79f633c99fb06a21d63593291627f0c14389ac09156288d2d5d4cc80382a9e1d47bbabce456eaa83fe549c52d686682a71a7fa2f0ce22b2338016902380e83d2e7ae4ee5ce7fd2c792903ba710be296fa4f70de31381100ee1c052488f8515ad9b98516ff4766b634332b0943789f362460313f39a5ee31e94f85ff49706d5e95423224f3875745f7910be", @typed={0x8, 0x96, 0x0, 0x0, @pid}, @typed={0x8, 0x63, 0x0, 0x0, @fd}, @typed={0x8, 0x12, 0x0, 0x0, @fd=r3}, @generic="f852add9924fffa3fa14c209a02205a3ae0eb6b67e95cee22b829ab992cacb76c85e887c87170cc345dd01eeb79f89a3ee31b84e3b01f978379ac6f742b295ef00d7c6a7fe9643f03843711fff6ae8cd8e63269d010d1916be75b0e3622e85"]}, @nested={0x1ed, 0x6d, 0x0, 0x1, [@generic="18c744d7142e933a22e1c0d55cf5e9222ea8f66fe71fc9aaedde17", @generic="02dc37b1114acfd6f1cd966ed6a0a9d741610aa3f630551765de0c043763f2913fc7847a4205a666a4f1ae3eb8f2f3c5388469d5bf7e79934d1b338c05490528a9eb7f56b268249f2c9f5d0fea325847ff90130b3857749de14992", @generic="2a5e7332ec36bb9e929c8dff6e440ddf2bfc15e6a510b2a3b2241917f86c3c97705814ec5210ffc73b46a9e39b3f116153371c79f66553a35867a50cef1c814d1cb291ebef656ea9c840f733569b394ea0629d743f4b9f9560477feff35c7e58915e53a9e4ddebfe0c64de1d732ed728116f8659d1b75391d68f219ddcd0d225a7fa2f9410767a438a99b5fbdb046039d2ae13d3ca0723e739527052b76f1509ef2dd9f64a0b7227aee70f60824121e0e80e737cb83b9fa6f276abec9d", @typed={0x8, 0x7d, 0x0, 0x0, @uid=0xee00}, @generic="7e0a614c2862bdc33faff16ec9766967346d05c828ae7491fc9fd85641be1f5eb9715fac510d36565f19e609ef1f62cfe3234f1bb7d562e475b80ba6876e57ac3c181f0980c229bb9b243401dad358702ad8b566ef420ce600ffd1ce0eaa1cfc849939a17e82cfb9a59894881db3cd92d55d858a52f66305628e6cae0fb93cb8041d9652b6c15e7e63e6f11601683af6001d7557c4c5bce5ffc7ca63e9c39c9b72be4cfc92b6", @typed={0x8, 0x19, 0x0, 0x0, @fd=r4}]}, @generic="591d9748443e7406c0a7cd971d1b034c33a07170cd3a789936767da30a8013", @generic="6d77800eb9d3b0c8f1853b94bd4a8ed464c6b175efa0", @generic="3e925f756c10feb13f3471632d0b3d240345fe015c4403e253e9800e14f098b073d6686727b05de4b361ea3293a8fe7c28bf378f373eda208176cfd1acb0867670621a4eca71a70888a6ad7029720e7a536351fed0286cf61cf6e41c05f552b9a4b9de86e430afd017cadc0886ea700ece17f4fa28ed41ca5e2c4c57bcb222818aff405e9b02b3bfbccf732dc41186d39c6d3ca321fc50d77473"]}, 0x1568}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00854f6f79577f713bf9c575d5e789e1b09c9c4c9afa7dedadd85986ad458752ed792fe97f912fd7f842a66fabefd4242ff1678b74d9489b707d43dfc243df5f6f96bef2128e0bc15ad13a743a6d7c8e5d5bf9800000d04300"/107, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
syz_io_uring_complete(0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
setgid(r5)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(0xffffffffffffffff, 0x0, r6)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:54:48 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

[ 2866.846150] FAULT_INJECTION: forcing a failure.
[ 2866.846150] name failslab, interval 1, probability 0, space 0, times 0
[ 2866.849760] CPU: 0 PID: 15004 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2866.851171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2866.852865] Call Trace:
[ 2866.853407]  dump_stack+0x107/0x167
[ 2866.854146]  should_fail.cold+0x5/0xa
[ 2866.854917]  ? cgroup_mkdir+0x254/0xf50
[ 2866.855724]  should_failslab+0x5/0x20
[ 2866.856500]  __kmalloc+0x72/0x390
[ 2866.857208]  cgroup_mkdir+0x254/0xf50
[ 2866.857986]  ? cgroup_destroy_locked+0x710/0x710
[ 2866.858952]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2866.859798]  vfs_mkdir+0x493/0x700
[ 2866.860532]  do_mkdirat+0x150/0x2b0
[ 2866.861272]  ? user_path_create+0xf0/0xf0
[ 2866.862117]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2866.863181]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2866.864252]  do_syscall_64+0x33/0x40
[ 2866.865006]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2866.866045] RIP: 0033:0x7f0ce482cb19
[ 2866.866803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2866.870522] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2866.872086] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2866.873541] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2866.874994] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2866.876446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2866.877887] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:54:48 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:54:48 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000000240)="5471b1144b41ea5d3a84aeface04e37c20db22963b444ef9418599d2958f28cc2a3b51258b13ca1c980289663ffdc8409932483a47c2ca6a7534703e10c04f477a3b4dea8144b23e7ca097fcda87bbd2c96388002bb354c3fffaa23f757eac769e079f861d66fd05b9a66a90b6be20e7ea9a10f798d637ea89", 0x79}], 0x2, 0x4, 0x9, 0x0)

00:54:48 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:48 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:48 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000)

00:54:48 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:54:48 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf2020000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

[ 2867.153653] FAULT_INJECTION: forcing a failure.
[ 2867.153653] name failslab, interval 1, probability 0, space 0, times 0
[ 2867.158747] CPU: 1 PID: 15056 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2867.160159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2867.161828] Call Trace:
[ 2867.162367]  dump_stack+0x107/0x167
[ 2867.163098]  should_fail.cold+0x5/0xa
[ 2867.163876]  ? create_object.isra.0+0x3a/0xa20
[ 2867.164803]  should_failslab+0x5/0x20
[ 2867.165571]  kmem_cache_alloc+0x5b/0x310
[ 2867.166390]  create_object.isra.0+0x3a/0xa20
[ 2867.167275]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2867.168318]  __kmalloc+0x16e/0x390
[ 2867.169046]  cgroup_mkdir+0x254/0xf50
[ 2867.169812]  ? cgroup_destroy_locked+0x710/0x710
[ 2867.170768]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2867.171601]  vfs_mkdir+0x493/0x700
[ 2867.172329]  do_mkdirat+0x150/0x2b0
[ 2867.173063]  ? user_path_create+0xf0/0xf0
[ 2867.173904]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2867.174954]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2867.176012]  do_syscall_64+0x33/0x40
[ 2867.176767]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2867.177790] RIP: 0033:0x7f0ce482cb19
[ 2867.178538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2867.182215] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2867.183751] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2867.185188] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2867.186632] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2867.188095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2867.189529] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:54:49 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB="6dc95a1f27b88945e9d6d1624e614646f48b710bfc8fdc87258eb645a485b275bfc14045525e043f594a9454a17552be399616af5c3346f8bff85fba1c544842079271b49a65561757bc62f140ac1cbf983fd1446e23ef78de79eff5d74d001dc2f393fc5b27ce9b99fd"])
preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, 0xd1, 0xfff)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000540)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r5}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000000040)={<r9=>0x0, <r10=>0x0})
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x40)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r8, &(0x7f0000000040)=0x80, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x80000, 0x1, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000)=<r12=>0x0)
r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000000, 0x40010, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r13, r12, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe1)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/35, 0x23}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:54:49 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1003000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:54:49 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:00 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:00 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:00 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0xea226789c4783eb8, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001b00310b0000ebfee85846d7cbad0000"], 0x14}}, 0x0)
sendfile(r3, r7, &(0x7f0000000140)=0x100000000, 0xffffffffffff896a)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = dup2(r8, r6)
r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r10, r9)
openat(r9, &(0x7f0000000040)='./file0\x00', 0x208400, 0x81)

00:55:00 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)

00:55:00 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r2, @ANYBLOB])
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x5, 0x307, 0xc6, 0x40, 0x9, 0x10000, 0xffffff12, 0x0, 0x3, 0x80, 0x5, 0x9f21, 0x28ea1bdb, 0x100}, 0x20, [0x0, 0x0, 0x0, 0x0]})
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(0xffffffffffffffff, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:00 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:00 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:55:00 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

[ 2879.035152] FAULT_INJECTION: forcing a failure.
[ 2879.035152] name failslab, interval 1, probability 0, space 0, times 0
[ 2879.036471] CPU: 0 PID: 15107 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2879.037239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2879.038139] Call Trace:
[ 2879.038447]  dump_stack+0x107/0x167
[ 2879.038844]  should_fail.cold+0x5/0xa
[ 2879.039271]  ? create_object.isra.0+0x3a/0xa20
[ 2879.039788]  should_failslab+0x5/0x20
[ 2879.040212]  kmem_cache_alloc+0x5b/0x310
[ 2879.040670]  create_object.isra.0+0x3a/0xa20
[ 2879.041163]  kmemleak_alloc_percpu+0xa0/0x100
[ 2879.041667]  pcpu_alloc+0x4e2/0x1240
[ 2879.042076]  ? cset_cgroup_from_root+0x2a0/0x2a0
[ 2879.042615]  percpu_ref_init+0x31/0x3d0
[ 2879.043047]  cgroup_mkdir+0x28b/0xf50
[ 2879.043477]  ? cgroup_destroy_locked+0x710/0x710
[ 2879.043992]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2879.044465]  vfs_mkdir+0x493/0x700
[ 2879.044846]  do_mkdirat+0x150/0x2b0
[ 2879.045254]  ? user_path_create+0xf0/0xf0
[ 2879.045722]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2879.046301]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2879.046880]  do_syscall_64+0x33/0x40
[ 2879.047295]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2879.047868] RIP: 0033:0x7f0ce482cb19
[ 2879.048302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2879.050345] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2879.051199] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2879.051993] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2879.052794] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2879.053587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2879.054377] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:55:00 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000)

00:55:01 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000040)={0x400, 0x2, 0x7, 0x7, 0x6})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:01 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a2b000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:55:01 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:01 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:14 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:14 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:14 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:14 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

[ 2892.544603] FAULT_INJECTION: forcing a failure.
[ 2892.544603] name failslab, interval 1, probability 0, space 0, times 0
[ 2892.547122] CPU: 1 PID: 15171 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2892.548551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2892.550250] Call Trace:
[ 2892.550791]  dump_stack+0x107/0x167
[ 2892.551531]  should_fail.cold+0x5/0xa
[ 2892.552304]  ? create_object.isra.0+0x3a/0xa20
[ 2892.553246]  should_failslab+0x5/0x20
[ 2892.554029]  kmem_cache_alloc+0x5b/0x310
[ 2892.554852]  ? mark_held_locks+0x9e/0xe0
[ 2892.555664]  create_object.isra.0+0x3a/0xa20
[ 2892.556573]  kmemleak_alloc_percpu+0xa0/0x100
[ 2892.557501]  pcpu_alloc+0x4e2/0x1240
[ 2892.558291]  ? cset_cgroup_from_root+0x2a0/0x2a0
[ 2892.559242]  percpu_ref_init+0x31/0x3d0
[ 2892.560238]  cgroup_mkdir+0x28b/0xf50
[ 2892.561070]  ? cgroup_destroy_locked+0x710/0x710
[ 2892.562030]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2892.562880]  vfs_mkdir+0x493/0x700
[ 2892.563606]  do_mkdirat+0x150/0x2b0
00:55:14 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7, 0x0, 0x2000]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:14 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)

00:55:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

[ 2892.564358]  ? user_path_create+0xf0/0xf0
[ 2892.565303]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2892.566372]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2892.567410]  do_syscall_64+0x33/0x40
[ 2892.568155]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2892.569235] RIP: 0033:0x7f0ce482cb19
00:55:14 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = dup2(r7, r6)
r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r9, r8)
syz_io_uring_setup(0x6505, &(0x7f00000002c0)={0x0, 0x4a19, 0x1, 0x3, 0x2d7, 0x0, r8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r10 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000540)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r10}, 0x0)
syz_io_uring_submit(r4, r12, &(0x7f0000000040), 0x7)

[ 2892.569994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2892.573828] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2892.575358] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2892.576795] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2892.578256] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2892.579690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2892.581162] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:55:14 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000640)='./file0\x00')
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000004dfa9000100000002004000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000337cc15bcb97f0fcff7ffc0000000000010000001a000000f655a36184441204", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
r4 = pidfd_getfd(r2, r3, 0x0)
accept(r4, &(0x7f0000000840)=@caif=@rfm, &(0x7f00000002c0)=0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(0xffffffffffffffff, 0x0, r5)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:55:14 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:14 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000)

00:55:14 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:14 executing program 7:
r0 = dup(0xffffffffffffffff)
r1 = perf_event_open(0x0, 0x0, 0x7, r0, 0x8)
r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
r11 = dup2(r10, r9)
r12 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r13 = dup2(r12, r11)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r12], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)="a4efd775a7456fcca4d595c6ff5815b30992b58f", 0x14}, {&(0x7f00000002c0)="0a82939678a6d579485345fce54486d736a03d86946c27b36723fb7d9053bffa37301476b152e71d0b8e11", 0x2b}, {&(0x7f0000000300)="aa7a15c27a249324189b355854a93d0a4624a009d74a6765fd", 0x19}, {&(0x7f0000000340)="93a8d911215e5c58866c206abef37adc09ba65ffc1235e0a66fc478087ed6e67ecaf633960ed5b6ff4db6dfad886252dba9133bee1e352216b6e682e623f0846025a68cf50002fabd35bd39cb3372c70894b116baa79e448dbc6ab376ebb34251c9eb6e5fcb894ee467d40406b11250279379bbf8ce3f6635cd4b55e50dcbef3be48a24bf085a525c06ebc15b7b8d1ce3ec1891eea0b1eab13a0a890848d6a9e939baba129551cb2da735dbee27a44ee51003945aeabc4fee6bf0bc3bcab59ba5779420937ed5dd61b291bd1fda4e2f18345b2a7422b0c6a9ab9923502402d65eb31838da5c57a81da2fdfac6337dc", 0xef}], 0x4, 0x0, 0x0, 0x91}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a00)="463ddcded5f17006f895babd00502d6344d80921d413de61476ce4669f52875e41774ca978f91668147317ce0d99068a81c977bc2c606fb5d9965f0f5db120c1e8bd2cc69a03d5277c970d36fd8281743d07b8c3c83f1dc2d888de79e6dced5f1a421dee465917dd95f2204653aff29b6d5b91c1b16764473b84bef91a7cbb87bc79a15b72cd5e21a035d38d1b004a9e1ce97a6310a3180d", 0x98}], 0x1, 0x0, 0x0, 0x1c080}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="1e345b6fc7da06ed671934db1ddddeb02dd13305ed29aa576ad567eacfa548d76b2fbd45f65168a67592f38ddfe4763277dccc77fc819322ad1b2f1dcf3ada19bc88028bc44c6fda932e678e7c99ad69e19a82d9c31978483d99d341526d77e0cb68d487b127d3d99978805b18f23aa56ad088d79992a4907ed7ee3b6231b2a1bfda1e21f937a79456e26daa77c3af3d22d851d59fab", 0x96}], 0x1, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r13, r11, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, r11, 0xffffffffffffffff, r10, r14]}}], 0x88, 0x845}}, {{&(0x7f0000002d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002d80)}], 0x1, &(0x7f0000002e00), 0x0, 0x800}}], 0x4, 0x200000d4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:14 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:14 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:55:14 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(0xffffffffffffffff, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:55:14 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0x5)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d38, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_setup(0x4af0, &(0x7f0000000140)={0x0, 0x9a4f, 0x8, 0x3, 0x31c, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=<r6=>0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r7, 0x0, &(0x7f0000000280)="18fb97d13d18c94ff5043251537937c7142a60ef94608f68fa9519390907cf64263bd1de2c6117cdcd02b2088c3835d5c1b4c6aa8631abf0dc619f4a5ea82cb24c626dd7b8d929c9b84006a733e1a57e9810a32bcc85", 0x56, 0x4, 0x1}, 0x9)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

[ 2892.946756] FAULT_INJECTION: forcing a failure.
[ 2892.946756] name failslab, interval 1, probability 0, space 0, times 0
[ 2892.949540] CPU: 0 PID: 15236 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2892.950965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2892.952653] Call Trace:
[ 2892.953202]  dump_stack+0x107/0x167
[ 2892.953957]  should_fail.cold+0x5/0xa
[ 2892.954733]  ? percpu_ref_init+0xd8/0x3d0
[ 2892.955580]  should_failslab+0x5/0x20
[ 2892.956364]  kmem_cache_alloc_trace+0x55/0x320
[ 2892.957301]  ? cset_cgroup_from_root+0x2a0/0x2a0
[ 2892.958265]  percpu_ref_init+0xd8/0x3d0
[ 2892.959070]  cgroup_mkdir+0x28b/0xf50
[ 2892.959830]  ? cgroup_destroy_locked+0x710/0x710
[ 2892.960803]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2892.961630]  vfs_mkdir+0x493/0x700
[ 2892.962343]  do_mkdirat+0x150/0x2b0
[ 2892.963065]  ? user_path_create+0xf0/0xf0
[ 2892.963889]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2892.964952]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2892.966002]  do_syscall_64+0x33/0x40
[ 2892.966753]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2892.967781] RIP: 0033:0x7f0ce482cb19
[ 2892.968549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2892.972257] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2892.973814] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2892.975247] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2892.976721] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2892.978165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2892.979571] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:55:14 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x56dfff7f)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:14 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)

00:55:28 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7fffdf56)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:28 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:55:28 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x400, 0x0, 0x0, 0x1000008, &(0x7f0000000b00)={[{@huge_within_size}, {@gid={'gid', 0x3d, r2}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x67, 0x6b]}}, {@huge_advise}, {@huge_advise}, {@huge_always}, {@size={'size', 0x3d, [0x78, 0x25, 0x37, 0x70, 0x70, 0x39, 0x67, 0x67, 0x70, 0x2d]}}, {@size={'size', 0x3d, [0x0, 0x74, 0x6d, 0x25, 0x6d, 0x32, 0x30, 0x36]}}], [{@subj_user}]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000980)=""/162, 0xa2}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/206, 0xce}], 0x4, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000500)=""/18, 0x12}, {&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000c80)=""/124, 0x7c}, {&(0x7f0000000d00)=""/7, 0x7}, {&(0x7f0000000d40)=""/66, 0x42}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/149, 0x95}, {&(0x7f0000000ec0)=""/44, 0x2c}, {&(0x7f0000000f00)=""/50, 0x32}, {&(0x7f0000000f40)=""/23, 0x17}], 0xa, &(0x7f0000001040)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001180)=""/180, 0xb4}, {&(0x7f0000001240)=""/76, 0x4c}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/173, 0xad}, {&(0x7f00000013c0)=""/2, 0x2}, {&(0x7f0000001400)=""/244, 0xf4}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001500)=""/64, 0x40}, {&(0x7f0000001540)=""/226, 0xe2}], 0x9, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001800)}, {&(0x7f0000001840)=""/185, 0xb9}, {&(0x7f0000001900)=""/10, 0xa}, {&(0x7f0000001940)}, {&(0x7f00000019c0)=""/25, 0x19}, {&(0x7f0000001a00)=""/38, 0x26}, {&(0x7f0000001a40)=""/97, 0x61}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x8, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000004e00)=""/96, 0x60}], 0x1, &(0x7f0000004e80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000004f80)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005000)=""/249, 0xf9}, {&(0x7f0000005100)=""/145, 0x91}, {&(0x7f00000051c0)=""/116, 0x74}, {&(0x7f0000005240)=""/34, 0x22}, {&(0x7f0000005280)=""/161, 0xa1}, {&(0x7f0000005340)=""/104, 0x68}, {&(0x7f00000053c0)=""/104, 0x68}, {&(0x7f0000005440)=""/115, 0x73}, {&(0x7f00000054c0)=""/48, 0x30}, {&(0x7f0000005500)=""/184, 0xb8}], 0xa}}], 0x6, 0x10000, 0x0)
setresgid(r2, r1, r3)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fchown(0xffffffffffffffff, 0x0, r4)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:28 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:28 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:28 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)

00:55:28 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

[ 2906.262255] tmpfs: Unsupported parameter 'huge'
[ 2906.294237] FAULT_INJECTION: forcing a failure.
[ 2906.294237] name failslab, interval 1, probability 0, space 0, times 0
[ 2906.296781] CPU: 1 PID: 15274 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2906.298153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2906.299785] Call Trace:
[ 2906.300316]  dump_stack+0x107/0x167
[ 2906.301064]  should_fail.cold+0x5/0xa
[ 2906.301833]  ? create_object.isra.0+0x3a/0xa20
[ 2906.302751]  should_failslab+0x5/0x20
[ 2906.303369] tmpfs: Unsupported parameter 'huge'
[ 2906.303521]  kmem_cache_alloc+0x5b/0x310
[ 2906.305264]  create_object.isra.0+0x3a/0xa20
[ 2906.306130]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2906.307134]  kmem_cache_alloc_trace+0x151/0x320
[ 2906.308066]  ? cset_cgroup_from_root+0x2a0/0x2a0
[ 2906.309054]  percpu_ref_init+0xd8/0x3d0
[ 2906.309857]  cgroup_mkdir+0x28b/0xf50
[ 2906.310630]  ? cgroup_destroy_locked+0x710/0x710
[ 2906.311573]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2906.312417]  vfs_mkdir+0x493/0x700
[ 2906.313143]  do_mkdirat+0x150/0x2b0
[ 2906.313888]  ? user_path_create+0xf0/0xf0
[ 2906.314741]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2906.315796]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2906.316849]  do_syscall_64+0x33/0x40
[ 2906.317588]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2906.318599] RIP: 0033:0x7f0ce482cb19
[ 2906.319337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2906.323023] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2906.324573] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2906.325968] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2906.327372] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2906.328808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2906.330224] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:55:28 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r6 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000540)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r6}, 0x0)
syz_io_uring_submit(r7, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x6, 0x1, 0xfffffffffffff6f7, 0x4, 0x10, 0x0, {0x2}}, 0xfff)

00:55:28 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

00:55:28 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:28 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x942c0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:28 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:28 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:41 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:41 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:55:41 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3e03000000000000)

00:55:41 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x9f030000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:41 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:41 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:55:41 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:41 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000280), 0x1, 0x101000)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x119b28)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

[ 2919.938867] FAULT_INJECTION: forcing a failure.
[ 2919.938867] name failslab, interval 1, probability 0, space 0, times 0
[ 2919.941630] CPU: 0 PID: 15351 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2919.943022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2919.944704] Call Trace:
[ 2919.945261]  dump_stack+0x107/0x167
[ 2919.946020]  should_fail.cold+0x5/0xa
[ 2919.946807]  ? create_object.isra.0+0x3a/0xa20
[ 2919.947769]  should_failslab+0x5/0x20
[ 2919.948548]  kmem_cache_alloc+0x5b/0x310
[ 2919.949397]  create_object.isra.0+0x3a/0xa20
[ 2919.950302]  kmemleak_alloc_percpu+0xa0/0x100
[ 2919.951245]  pcpu_alloc+0x4e2/0x1240
[ 2919.952039]  cgroup_rstat_init+0x14f/0x1f0
[ 2919.953217]  cgroup_mkdir+0x709/0xf50
[ 2919.954008]  ? cgroup_destroy_locked+0x710/0x710
[ 2919.954977]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2919.955821]  vfs_mkdir+0x493/0x700
[ 2919.956556]  do_mkdirat+0x150/0x2b0
[ 2919.957320]  ? user_path_create+0xf0/0xf0
[ 2919.958185]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2919.959257]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2919.960310]  do_syscall_64+0x33/0x40
[ 2919.961070]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2919.962111] RIP: 0033:0x7f0ce482cb19
[ 2919.962864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2919.966627] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2919.968168] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2919.969615] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2919.971059] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2919.972507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2919.973968] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:55:41 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:41 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:41 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:41 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:55:42 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:42 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
io_uring_enter(r0, 0x4c47, 0x140b, 0x3, &(0x7f00000001c0)={[0x3]}, 0x8)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r6 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000540)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r6}, 0x0)
syz_io_uring_submit(r7, r5, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r0, &(0x7f0000000040)={0x20000000}, r0, 0x3, 0x0, 0x1}, 0x8)

00:55:42 executing program 5:
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80800)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0xfffffff9, 0x7}, 0x100, './file0\x00'})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0xeabf)

00:55:42 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)

00:55:42 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
r2 = open(&(0x7f00000001c0)='./file0\x00', 0x400, 0x29)
close(r2)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(0xffffffffffffffff, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

[ 2920.250175] FAULT_INJECTION: forcing a failure.
[ 2920.250175] name failslab, interval 1, probability 0, space 0, times 0
[ 2920.252943] CPU: 0 PID: 15423 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2920.254465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2920.256276] Call Trace:
[ 2920.256873]  dump_stack+0x107/0x167
[ 2920.257671]  should_fail.cold+0x5/0xa
[ 2920.258501]  ? create_object.isra.0+0x3a/0xa20
[ 2920.259500]  should_failslab+0x5/0x20
[ 2920.260332]  kmem_cache_alloc+0x5b/0x310
[ 2920.261254]  ? mark_held_locks+0x9e/0xe0
[ 2920.262153]  create_object.isra.0+0x3a/0xa20
[ 2920.263127]  kmemleak_alloc_percpu+0xa0/0x100
[ 2920.264105]  pcpu_alloc+0x4e2/0x1240
[ 2920.264952]  cgroup_rstat_init+0x14f/0x1f0
[ 2920.265871]  cgroup_mkdir+0x709/0xf50
[ 2920.266721]  ? cgroup_destroy_locked+0x710/0x710
[ 2920.267749]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2920.268682]  vfs_mkdir+0x493/0x700
[ 2920.269467]  do_mkdirat+0x150/0x2b0
[ 2920.270265]  ? user_path_create+0xf0/0xf0
[ 2920.271173]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2920.272323]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2920.273458]  do_syscall_64+0x33/0x40
[ 2920.274275]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2920.275396] RIP: 0033:0x7f0ce482cb19
[ 2920.276208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2920.280223] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2920.281899] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2920.283451] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2920.285020] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2920.286535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2920.288022] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:55:54 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:55:54 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:54 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0, <r8=>0x0, <r9=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
r12 = socket$netlink(0x10, 0x3, 0xa)
r13 = perf_event_open$cgroup(&(0x7f0000000cc0)={0x4, 0x80, 0x5, 0x99, 0x65, 0x5, 0x0, 0x0, 0x10000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000c80), 0x6}, 0x2, 0x7fff, 0x8, 0x8, 0x40000000, 0x2, 0x7, 0x0, 0xffff8ab5, 0x0, 0x2}, r10, 0x10, r4, 0xe)
r14 = openat$cgroup_pressure(r6, &(0x7f0000000d40)='memory.pressure\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000d80)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@broadcast}}}, &(0x7f0000000e80)=0xe8)
r16 = accept(r4, 0x0, &(0x7f0000000ec0))
r17 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r17, @ANYBLOB])
r18 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$unix(r4, &(0x7f0000001000)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000240)="5d03949e636a64bd24759bd952668398f68da3dc11ba4091489557145b8543a7aa88ae800d8ed773851aab38b5a0d3007ebc76a843cb2108834c19377edf454536ecaa8f053c7b7eae8795b097b974b7a828161302452730c9d05f408b69611b9127994d83e656321d14b85755ae1627269ea945e0b861ddce3415dbefc2740bf06a2c49fd4c8e75416e8f8e0e882205f1cfafd0b7fab677992cd4e8dfbb97343aee6ba4e19527075b5056", 0xab}, {&(0x7f0000000980)="590cd6c2fe4d3e17db5163cd01fbeb0166b01a975e42b02d961c5cca1932034eca92c22677c2d436bd7e92c5b6c643893e896f79a0341f96a0097112ffd119f934a3da223d4436927083db8a10c5113d5f3749aa7e509ea5530828cbd717bc305a8ade1f78ab66b36f345c523297cd91c14f55", 0x73}, {&(0x7f0000000b00)="0ddfd26c6e0b49c467a807137833cb5b9147903f0a7947530d2d72136a129feb77ae6f623fa9d347d4ffe053c2d3d8640ae0476085afe81fca99159b88908a5a5143ab780aac9a27e3aee1b10f6f9f0ca354b9e331aeba80b69f0ec39635279023bf5d5d2f38ceafebf25efdc34e9f26d0f8deb96fb6961db05622c375d238582d20df", 0x83}, {&(0x7f0000000bc0)="8f04d0e8733fb52c3819b7fa0bac2fa830bb907c5c61dba77db7a9e3229b8729c33cd93f0b37d928b0e23621d8429f353f013902e35f9c99072fe7a2396d3e112c1b60993ccd78", 0x47}], 0x4, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r3, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r9}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r12]}}, @rights={{0x18, 0x1, 0x1, [r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r7, r15, r1}}}, @rights={{0x30, 0x1, 0x1, [r0, r11, r16, r17, r0, r10, r18, r5]}}], 0xc8, 0x8000}, 0x4011)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
fchown(0xffffffffffffffff, 0x0, r19)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:55:54 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x230342, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4e, 0x3, 0x8, 0x9, 0x0, 0x1, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x2d}, 0x100, 0x7, 0x4, 0x5, 0x4, 0x7f, 0x20, 0x0, 0x2, 0x0, 0x1000}, 0x0, 0x6, r4, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r5, @ANYBLOB])
write$binfmt_elf64(r5, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0xe0, 0x0, 0x5, 0x5, 0x8, 0x3, 0x3, 0x3, 0xbe, 0x40, 0x1af, 0x0, 0x2, 0x38, 0x2, 0x4, 0x8000}, [{0x60000000, 0x200, 0x40, 0x7fff, 0x7, 0x3f, 0x8, 0x2}], "ac778b6565d838c470609c80c6ec09e47ad6fb70a375b59865cbdb54c4994139d38f46d3aa1cdf085b1ffa76ebbd14e7c8469ad3c779eed508d635488f5625d331968877ea07d2cf83bfa9433379df2e9a49b2587af3dba7e73fc75ccd174187575f8bfaa7b1671f721cab5c41ae035dde074e3e12e5968ccf25e2fb1ce0bcbf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaf8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xeabf)

00:55:54 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4e2d0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:55:54 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x401)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x110, r4, 0x8000000)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x10000000)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x14}}, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r0, 0x0, &(0x7f0000002a00)="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", 0x231, 0x40000021}, 0x101)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:55:54 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)

00:55:54 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c000000000000)

[ 2932.689024] FAULT_INJECTION: forcing a failure.
[ 2932.689024] name failslab, interval 1, probability 0, space 0, times 0
[ 2932.694535] CPU: 1 PID: 15431 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2932.695934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2932.697604] Call Trace:
[ 2932.698143]  dump_stack+0x107/0x167
[ 2932.698879]  should_fail.cold+0x5/0xa
[ 2932.699652]  should_failslab+0x5/0x20
[ 2932.700415]  __kmalloc_track_caller+0x79/0x370
[ 2932.701339]  ? kstrdup_const+0x53/0x80
[ 2932.702122]  ? kmemleak_alloc_percpu+0xa0/0x100
[ 2932.703074]  kstrdup+0x36/0x70
[ 2932.703723]  kstrdup_const+0x53/0x80
[ 2932.704470]  __kernfs_new_node+0x9d/0x850
[ 2932.705322]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2932.706277]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2932.707211]  ? pcpu_alloc+0x12a/0x1240
[ 2932.708003]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2932.709052]  kernfs_create_dir_ns+0x9c/0x230
[ 2932.709937]  cgroup_mkdir+0x318/0xf50
[ 2932.710705]  ? cgroup_destroy_locked+0x710/0x710
[ 2932.711659]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2932.712499]  vfs_mkdir+0x493/0x700
[ 2932.713232]  do_mkdirat+0x150/0x2b0
[ 2932.713967]  ? user_path_create+0xf0/0xf0
[ 2932.714807]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2932.715869]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2932.716907]  do_syscall_64+0x33/0x40
[ 2932.717664]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2932.718675] RIP: 0033:0x7f0ce482cb19
[ 2932.719424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2932.723080] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2932.724613] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2932.726045] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2932.727469] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2932.728909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2932.730327] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:06 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8580c8b2db893bf804e821367f000000001800000000000000010000c56564", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:56:06 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:06 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000008, 0x10, r1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r9=>0x0, <r10=>0x0})
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x40)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x81, 0x0, 0x5, 0x4, 0x0, {0x0, r12}}, 0x101)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8a030000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:06 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r5, @ANYBLOB])
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r6, @ANYBLOB])
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40)
syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x4c6, &(0x7f0000000180)=[r5, r6], 0x2, 0x0, 0x1, {0x0, r9}}, 0x10000)
r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0xeac3)

00:56:06 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd52c000000000000)

[ 2944.818686] FAULT_INJECTION: forcing a failure.
[ 2944.818686] name failslab, interval 1, probability 0, space 0, times 0
[ 2944.820024] CPU: 1 PID: 15480 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2944.820790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2944.821725] Call Trace:
[ 2944.822035]  dump_stack+0x107/0x167
[ 2944.822445]  should_fail.cold+0x5/0xa
[ 2944.822868]  ? create_object.isra.0+0x3a/0xa20
[ 2944.823382]  should_failslab+0x5/0x20
[ 2944.823809]  kmem_cache_alloc+0x5b/0x310
[ 2944.824266]  ? lock_acquire+0x197/0x470
[ 2944.824717]  create_object.isra.0+0x3a/0xa20
[ 2944.825222]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2944.825805]  __kmalloc_track_caller+0x177/0x370
[ 2944.826344]  ? kstrdup_const+0x53/0x80
[ 2944.826796]  kstrdup+0x36/0x70
[ 2944.827168]  kstrdup_const+0x53/0x80
[ 2944.827599]  __kernfs_new_node+0x9d/0x850
[ 2944.828083]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2944.828628]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2944.829181]  ? pcpu_alloc+0x12a/0x1240
[ 2944.829631]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2944.830222]  kernfs_create_dir_ns+0x9c/0x230
[ 2944.830727]  cgroup_mkdir+0x318/0xf50
[ 2944.831165]  ? cgroup_destroy_locked+0x710/0x710
[ 2944.831703]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2944.832177]  vfs_mkdir+0x493/0x700
[ 2944.832587]  do_mkdirat+0x150/0x2b0
[ 2944.833010]  ? user_path_create+0xf0/0xf0
[ 2944.833485]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2944.834081]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2944.834663]  do_syscall_64+0x33/0x40
[ 2944.835087]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2944.835671] RIP: 0033:0x7f0ce482cb19
[ 2944.836096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2944.838191] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2944.839046] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2944.839855] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2944.840658] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2944.841466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2944.842275] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:06 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000000))
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r5 = syz_io_uring_setup(0x67c3, &(0x7f0000000240)={0x0, 0x2fdf, 0x1, 0x1, 0xb, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)=<r6=>0x0)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x103000, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r8, r9+60000000}, 0x1, 0x1, 0x1, {0x0, r10}}, 0x40)
io_uring_enter(r1, 0x1c1e, 0x312f, 0x0, &(0x7f0000000300), 0x8)
syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x1632084d, 0x9, 0x1, {0x0, r10, r0}}, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x10010, r5, 0x0)

00:56:06 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:06 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000)

00:56:06 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x7fffffff}}, './file0\x00'})
r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xe6b7, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x10, 0xffffffffffffffff, 0x8000000)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xeabf)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x110, r1, 0x8000000)

00:56:07 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:07 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
fchown(0xffffffffffffffff, 0x0, r5)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={<r6=>r2, 0x1, 0x6, 0x1ff})
openat(r6, &(0x7f00000002c0)='./file1\x00', 0xb23002, 0x45)
pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0xb)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r4, 0x8000000)
r8 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000540)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r8}, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r10, &(0x7f0000000640)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r2, 0x0, &(0x7f0000000500)='./file1\x00', 0x101, 0x408003, 0x23456, {0x0, r11}}, 0xd6)

[ 2945.145854] FAULT_INJECTION: forcing a failure.
[ 2945.145854] name failslab, interval 1, probability 0, space 0, times 0
[ 2945.148630] CPU: 0 PID: 15529 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2945.150055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2945.151763] Call Trace:
[ 2945.152317]  dump_stack+0x107/0x167
[ 2945.153086]  should_fail.cold+0x5/0xa
[ 2945.153869]  ? __kernfs_new_node+0xd4/0x850
[ 2945.154759]  should_failslab+0x5/0x20
[ 2945.155554]  kmem_cache_alloc+0x5b/0x310
[ 2945.156401]  __kernfs_new_node+0xd4/0x850
[ 2945.157262]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2945.158231]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2945.159184]  ? pcpu_alloc+0x12a/0x1240
[ 2945.159987]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2945.161063]  kernfs_create_dir_ns+0x9c/0x230
[ 2945.161978]  cgroup_mkdir+0x318/0xf50
[ 2945.162773]  ? cgroup_destroy_locked+0x710/0x710
[ 2945.163749]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2945.164607]  vfs_mkdir+0x493/0x700
[ 2945.165346]  do_mkdirat+0x150/0x2b0
[ 2945.166111]  ? user_path_create+0xf0/0xf0
[ 2945.166966]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2945.168046]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2945.169133]  do_syscall_64+0x33/0x40
[ 2945.169901]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2945.170955] RIP: 0033:0x7f0ce482cb19
[ 2945.171724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2945.175513] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2945.177093] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2945.178551] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2945.180017] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2945.181500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2945.182967] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:07 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
r6 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000540)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r6}, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x2}, 0x8)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:56:07 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:07 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:07 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)

00:56:07 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0xeabf)
r6 = accept(r3, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6], 0x2)

00:56:21 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x6871, &(0x7f0000000600)={0x0, 0xd678, 0x3e, 0x2, 0x3b0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000440), &(0x7f0000000680)=<r4=>0x0)
r5 = accept(r3, 0x0, &(0x7f00000006c0))
syz_io_uring_submit(r1, r4, &(0x7f0000000800)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r5, 0x0, &(0x7f0000000700)="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", 0xfe, 0x20048044, 0x1}, 0x31a)
r6 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r7, @ANYBLOB])
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r8 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0)
clone3(&(0x7f0000000340)={0x900000, &(0x7f0000000140)=<r9=>0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2c}, &(0x7f0000000240)=""/122, 0x7a, &(0x7f00000002c0)=""/53, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0x9, 0x8000, 0x6, 0x0, 0x0, [{{}, 0x80000001}, {{r6}, 0x1}, {{r8}, 0x6}, {{r6}, 0x7}, {{r9}, 0x2}, {{r0}, 0x9}]})
r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0xeabf)

00:56:21 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(0xffffffffffffffff, 0x0, r6)
r7 = openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa0162080}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, 0x3fa, 0x0, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r8=>r3, {0xfffff001}}, './file0\x00'})
mkdirat(r8, &(0x7f0000000200)='./file0\x00', 0x108)
r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r9, @ANYBLOB])
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r7)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)={0x70, r10, 0x10c, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9c}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x44080)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x7a02, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:56:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:21 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r7, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)

00:56:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:21 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="f25a65fc813d03bb000000030000000000000000000085000001005d5d421200ff013400"]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

[ 2959.480933] FAULT_INJECTION: forcing a failure.
[ 2959.480933] name failslab, interval 1, probability 0, space 0, times 0
[ 2959.483879] CPU: 0 PID: 15605 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2959.485433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2959.487239] Call Trace:
[ 2959.487818]  dump_stack+0x107/0x167
[ 2959.488626]  should_fail.cold+0x5/0xa
[ 2959.489469]  ? create_object.isra.0+0x3a/0xa20
[ 2959.490491]  should_failslab+0x5/0x20
[ 2959.491319]  kmem_cache_alloc+0x5b/0x310
[ 2959.492219]  create_object.isra.0+0x3a/0xa20
[ 2959.493207]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2959.494340]  kmem_cache_alloc+0x159/0x310
[ 2959.495369]  __kernfs_new_node+0xd4/0x850
[ 2959.496532]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2959.497746]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2959.498808]  ? pcpu_alloc+0x12a/0x1240
[ 2959.499688]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2959.500871]  kernfs_create_dir_ns+0x9c/0x230
[ 2959.501894]  cgroup_mkdir+0x318/0xf50
[ 2959.502778]  ? cgroup_destroy_locked+0x710/0x710
[ 2959.503850]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2959.504774]  vfs_mkdir+0x493/0x700
[ 2959.505583]  do_mkdirat+0x150/0x2b0
[ 2959.506400]  ? user_path_create+0xf0/0xf0
[ 2959.507318]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2959.508487]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2959.509653]  do_syscall_64+0x33/0x40
[ 2959.510495]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2959.511637] RIP: 0033:0x7f0ce482cb19
[ 2959.512470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2959.516570] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2959.518296] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2959.519948] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2959.521813] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2959.523647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2959.525415] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:21 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:21 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = dup2(r3, r2)
r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r5, r4)
recvmmsg$unix(r4, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e8001c0000000000000000f9000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\t\x00\x00'], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
readv(r4, &(0x7f0000000500)=[{&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f0000000980)=""/170, 0xaa}, {&(0x7f0000000cc0)=""/173, 0xad}], 0x4)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresgid(r1, r6, r1)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(0xffffffffffffffff, 0x0, r7)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00')

00:56:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:21 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:21 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa199, 0x0, 0x6, 0x9f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000002a00)=""/4109, 0x100d}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:21 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r9}}, 0x6)
syz_io_uring_setup(0x4fa4, &(0x7f0000000200)={0x0, 0x7526, 0x8, 0x2, 0x1d4, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=<r10=>0x0, &(0x7f00000002c0))
r11 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000001000000e8fb49c1709394dc19b80d70dd25088ac7e9d2986dc4c963ad828f0e8d0781514d716fc750451940ae4ce43d467f20a0739125617afeb2e86f4764c5a6d57aaac3817b64811075c09a81934421d3a53f42535dc1ee4850906b83c80cc7bff17328c47ca28e51b875963ab0ccbf976ed56830b0e1a5bf14c5b056147db278ac5b34d73c5e35783f4f8504bad435d038cd650b855344d4b98e5cc6d8992e6bc5e16ac161", @ANYRES32=r11, @ANYBLOB])
syz_io_uring_submit(r10, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x100, 0xe, 0x0, {0x0, 0x0, r11}}, 0x1)

00:56:21 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/223, 0xdf}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x7f, 0x3, 0x8, 0x0, 0x10000, 0x40200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x77c15b0, 0x4, @perf_config_ext={0x4, 0x1}, 0x10011, 0x0, 0x0, 0x2, 0x3f, 0x7, 0x1000, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendfile(r6, r0, 0x0, 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

[ 2959.820740] FAULT_INJECTION: forcing a failure.
[ 2959.820740] name failslab, interval 1, probability 0, space 0, times 0
[ 2959.823621] CPU: 0 PID: 15653 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2959.825015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2959.826693] Call Trace:
[ 2959.827236]  dump_stack+0x107/0x167
[ 2959.827976]  should_fail.cold+0x5/0xa
[ 2959.828749]  ? radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2959.829923]  should_failslab+0x5/0x20
[ 2959.830690]  kmem_cache_alloc+0x5b/0x310
[ 2959.831516]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2959.832658]  radix_tree_extend+0x231/0x490
[ 2959.833541]  idr_get_free+0x623/0x8f0
[ 2959.834336]  idr_alloc_u32+0x170/0x2d0
[ 2959.835129]  ? __fprop_inc_percpu_max+0x130/0x130
[ 2959.836121]  ? lock_acquire+0x197/0x470
[ 2959.836923]  ? __kernfs_new_node+0xff/0x850
[ 2959.837818]  idr_alloc_cyclic+0x102/0x230
[ 2959.838655]  ? idr_alloc+0x130/0x130
[ 2959.839411]  ? rwlock_bug.part.0+0x90/0x90
[ 2959.840275]  __kernfs_new_node+0x117/0x850
[ 2959.841144]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2959.842120]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2959.843088]  ? pcpu_alloc+0x12a/0x1240
[ 2959.843879]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2959.844949]  kernfs_create_dir_ns+0x9c/0x230
[ 2959.845857]  cgroup_mkdir+0x318/0xf50
[ 2959.846644]  ? cgroup_destroy_locked+0x710/0x710
[ 2959.847599]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2959.848462]  vfs_mkdir+0x493/0x700
[ 2959.849191]  do_mkdirat+0x150/0x2b0
[ 2959.849930]  ? user_path_create+0xf0/0xf0
[ 2959.850776]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2959.851832]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2959.852876]  do_syscall_64+0x33/0x40
[ 2959.853648]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2959.854684] RIP: 0033:0x7f0ce482cb19
[ 2959.855437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2959.859153] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2959.860681] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2959.862128] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2959.863566] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2959.865005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2959.866462] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:21 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xafb0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x7)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0xeabf)

00:56:21 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:21 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x2ba}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
r7 = signalfd4(r0, &(0x7f0000000400)={[0xffffffff]}, 0x8, 0x80000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x110, r7, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
syz_io_uring_setup(0x28bb, &(0x7f0000000240)={0x0, 0xab85, 0x4, 0x1, 0x1ff, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x50de, &(0x7f00000002c0)={0x0, 0x6519, 0x1, 0x3, 0x173, 0x0, r1}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x80000, 0x1}, 0x97a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:56:21 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:21 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

[ 2959.991963] FAULT_INJECTION: forcing a failure.
[ 2959.991963] name failslab, interval 1, probability 0, space 0, times 0
[ 2959.993349] CPU: 1 PID: 15686 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2959.994099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2959.995069] Call Trace:
[ 2959.995370]  dump_stack+0x107/0x167
[ 2959.995804]  should_fail.cold+0x5/0xa
[ 2959.996246]  ? create_object.isra.0+0x3a/0xa20
[ 2959.996776]  should_failslab+0x5/0x20
[ 2959.997227]  kmem_cache_alloc+0x5b/0x310
[ 2959.997691]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2959.998218]  create_object.isra.0+0x3a/0xa20
[ 2959.998708]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2959.999259]  __kmalloc+0x16e/0x390
[ 2959.999679]  selinux_kernfs_init_security+0x137/0x4c0
[ 2960.000385]  ? selinux_file_mprotect+0x610/0x610
[ 2960.001099]  ? find_held_lock+0x2c/0x110
[ 2960.001703]  ? __kernfs_new_node+0x2ad/0x850
[ 2960.002190]  ? lock_downgrade+0x6d0/0x6d0
[ 2960.002642]  ? rwlock_bug.part.0+0x90/0x90
[ 2960.003138]  security_kernfs_init_security+0x4e/0xb0
[ 2960.003711]  __kernfs_new_node+0x531/0x850
[ 2960.004186]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2960.004714]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2960.005263]  ? pcpu_alloc+0x12a/0x1240
[ 2960.005706]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2960.006286]  kernfs_create_dir_ns+0x9c/0x230
[ 2960.006786]  cgroup_mkdir+0x318/0xf50
[ 2960.007228]  ? cgroup_destroy_locked+0x710/0x710
[ 2960.007758]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2960.008223]  vfs_mkdir+0x493/0x700
[ 2960.008629]  do_mkdirat+0x150/0x2b0
[ 2960.009053]  ? user_path_create+0xf0/0xf0
[ 2960.009515]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2960.010139]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2960.010684]  do_syscall_64+0x33/0x40
[ 2960.011116]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2960.011678] RIP: 0033:0x7f0ce482cb19
[ 2960.012081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2960.014180] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2960.014994] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2960.015780] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2960.016575] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2960.017398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2960.018220] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:35 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5c29000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:35 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r5, @ANYBLOB])
fcntl$dupfd(r0, 0x406, r5)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r9 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000540)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r9}, 0x0)
r12 = memfd_create(&(0x7f0000000040)='\x00', 0x1)
syz_io_uring_submit(r8, r11, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r12, 0x1800, 0x0, 0x4, 0x1, 0x1}, 0x935f)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r13 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r14 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r14, r13)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x10, r14, 0x8000000)

00:56:35 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
r2 = semget$private(0x0, 0x2, 0x0)
semop(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1)
semctl$IPC_RMID(r2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000980)={{0x1, r3, r1, 0xee00, r1, 0x184, 0xfffa}, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x8})
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fchown(0xffffffffffffffff, 0x0, r4)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:56:35 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r6, @ANYBLOB])
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:56:35 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:35 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
r5 = dup(r4)
pread64(r5, &(0x7f0000000140)=""/26, 0x1a, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x12243, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x40, 0x2ce}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000540)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r6}, 0x0)
syz_io_uring_setup(0x3a98, &(0x7f0000000180)={0x0, 0x2863, 0x4, 0x3, 0x19c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)=<r9=>0x0)
syz_io_uring_submit(r7, r9, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10}, 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000)
r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0xeabf)

[ 2973.383848] FAULT_INJECTION: forcing a failure.
[ 2973.383848] name failslab, interval 1, probability 0, space 0, times 0
[ 2973.386537] CPU: 1 PID: 15709 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2973.387925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2973.389587] Call Trace:
[ 2973.390123]  dump_stack+0x107/0x167
[ 2973.390872]  should_fail.cold+0x5/0xa
[ 2973.391649]  ? radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2973.392806]  should_failslab+0x5/0x20
[ 2973.393575]  kmem_cache_alloc+0x5b/0x310
[ 2973.394406]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2973.395518]  idr_get_free+0x4b5/0x8f0
[ 2973.396305]  idr_alloc_u32+0x170/0x2d0
[ 2973.397102]  ? __fprop_inc_percpu_max+0x130/0x130
[ 2973.398106]  ? lock_acquire+0x197/0x470
[ 2973.398908]  ? __kernfs_new_node+0xff/0x850
[ 2973.399785]  idr_alloc_cyclic+0x102/0x230
[ 2973.400617]  ? idr_alloc+0x130/0x130
[ 2973.401375]  ? rwlock_bug.part.0+0x90/0x90
[ 2973.402227]  __kernfs_new_node+0x117/0x850
[ 2973.403085]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2973.404036]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2973.404972]  ? pcpu_alloc+0x12a/0x1240
[ 2973.405781]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2973.406832]  kernfs_create_dir_ns+0x9c/0x230
[ 2973.407731]  cgroup_mkdir+0x318/0xf50
[ 2973.408504]  ? cgroup_destroy_locked+0x710/0x710
[ 2973.409468]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2973.410301]  vfs_mkdir+0x493/0x700
[ 2973.411014]  do_mkdirat+0x150/0x2b0
[ 2973.411741]  ? user_path_create+0xf0/0xf0
[ 2973.412568]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2973.413619]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2973.414653]  do_syscall_64+0x33/0x40
[ 2973.415424]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2973.416468] RIP: 0033:0x7f0ce482cb19
[ 2973.417231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2973.421024] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2973.422564] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2973.424009] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2973.425459] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2973.426891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2973.428323] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:50 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:50 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = syz_io_uring_setup(0x6063, &(0x7f0000000080)={0x0, 0x2000000, 0x8, 0x3, 0x4d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
r11 = dup2(r10, r9)
r12 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r12, r11)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', r13, 0x2f, 0x5f, 0x7f, 0x0, 0x70, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8060, 0x40, 0x100}})
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:56:50 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000f, 0x12830, r0, 0x8000000)
clock_gettime(0x0, &(0x7f0000000040))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r9=>r0, {0x1}}, './file0\x00'})
openat$cgroup_pressure(r3, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x406d813, r9, 0x10000000)
r11 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r11, @ANYBLOB])
syz_io_uring_submit(0x0, r10, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x80000001, &(0x7f0000000240)=[r4, r9, r11], 0x3}, 0xa)
syz_io_uring_submit(r7, r6, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x5, 0x0, 0x1, 0x400, 0xe, 0x1, {0x1, r8}}, 0x81)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:50 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c00000000000050a5d02c98bf2ca900", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:56:50 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:50 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r5=>r4}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x200000, 0x1)
getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000240)={'filter\x00', 0xda, "ddf7a569b514c2518cd9d67f40da7845e9bda19c74fcb27c829a3df8ae889ce56c06192a604b8aeacefa9d3f28bb4b9c9a886b9e8de34be13983104c27d3be4d328b968c2b3841282be16958aefd44b7612466de0233eaa7df58aea2840dda91d109c5c357e5724a50cba8162c0497b0b1a73a5ac52909e3fb4aaee035a085ba323f5b2005189a0da9963bdf75ce761ab7f1c8df919b573746db950216652bdba5ef7a6cdde3cb4e08cbdca161c219dbb6fd70da76ce45edc6428f72760ce33d22c5041c34fdee808ac3e0a27f9ea928fdf695e2e88f7fab2778"}, &(0x7f00000001c0)=0xfe)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xeabf)

00:56:50 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:50 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x99ceff7f00000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

[ 2988.327781] FAULT_INJECTION: forcing a failure.
[ 2988.327781] name failslab, interval 1, probability 0, space 0, times 0
[ 2988.330626] CPU: 1 PID: 15761 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2988.332055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2988.333764] Call Trace:
[ 2988.334304]  dump_stack+0x107/0x167
[ 2988.335043]  should_fail.cold+0x5/0xa
[ 2988.335821]  ? create_object.isra.0+0x3a/0xa20
[ 2988.336758]  should_failslab+0x5/0x20
[ 2988.337543]  kmem_cache_alloc+0x5b/0x310
[ 2988.338371]  create_object.isra.0+0x3a/0xa20
[ 2988.339277]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2988.340310]  kmem_cache_alloc+0x159/0x310
[ 2988.341150]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2988.342280]  idr_get_free+0x4b5/0x8f0
[ 2988.343060]  idr_alloc_u32+0x170/0x2d0
[ 2988.343848]  ? __fprop_inc_percpu_max+0x130/0x130
[ 2988.344818]  ? lock_acquire+0x197/0x470
[ 2988.345640]  ? __kernfs_new_node+0xff/0x850
[ 2988.346528]  idr_alloc_cyclic+0x102/0x230
[ 2988.347361]  ? idr_alloc+0x130/0x130
[ 2988.348107]  ? rwlock_bug.part.0+0x90/0x90
[ 2988.348974]  __kernfs_new_node+0x117/0x850
[ 2988.349866]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2988.350824]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2988.351784]  ? pcpu_alloc+0x12a/0x1240
[ 2988.352588]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2988.353665]  kernfs_create_dir_ns+0x9c/0x230
[ 2988.354549]  cgroup_mkdir+0x318/0xf50
[ 2988.355317]  ? cgroup_destroy_locked+0x710/0x710
[ 2988.356267]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2988.357105]  vfs_mkdir+0x493/0x700
[ 2988.357838]  do_mkdirat+0x150/0x2b0
[ 2988.358573]  ? user_path_create+0xf0/0xf0
[ 2988.359416]  do_syscall_64+0x33/0x40
[ 2988.360163]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2988.361192] RIP: 0033:0x7f0ce482cb19
[ 2988.361951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2988.365657] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2988.367181] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2988.368603] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2988.370037] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2988.371467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2988.372895] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:56:50 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r0, {0x4}}, './file0\x00'})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xeabf)

00:56:50 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:50 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:50 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r8=>0x0, &(0x7f0000000540)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r7}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
syz_io_uring_submit(r8, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0xaa000000, 0x5, 0x0, {0x0, 0x0, r10}}, 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:56:50 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:56:50 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:56:50 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000140))
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0xeabf)

[ 2988.692831] FAULT_INJECTION: forcing a failure.
[ 2988.692831] name failslab, interval 1, probability 0, space 0, times 0
00:56:50 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
close_range(r7, r6, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4a600, 0x0)
dup2(r8, r9)
fstat(r3, &(0x7f0000000240))

[ 2988.695764] CPU: 0 PID: 15809 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 2988.697184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2988.698879] Call Trace:
[ 2988.699415]  dump_stack+0x107/0x167
[ 2988.700148]  should_fail.cold+0x5/0xa
[ 2988.700915]  ? radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2988.702073]  should_failslab+0x5/0x20
[ 2988.702835]  kmem_cache_alloc+0x5b/0x310
[ 2988.703668]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 2988.704803]  idr_get_free+0x4b5/0x8f0
[ 2988.705596]  idr_alloc_u32+0x170/0x2d0
[ 2988.706393]  ? __fprop_inc_percpu_max+0x130/0x130
[ 2988.707367]  ? lock_acquire+0x197/0x470
[ 2988.708170]  ? __kernfs_new_node+0xff/0x850
[ 2988.709049]  idr_alloc_cyclic+0x102/0x230
[ 2988.709917]  ? idr_alloc+0x130/0x130
[ 2988.710669]  ? rwlock_bug.part.0+0x90/0x90
[ 2988.711534]  __kernfs_new_node+0x117/0x850
[ 2988.712399]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 2988.713356]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 2988.714304]  ? pcpu_alloc+0x12a/0x1240
[ 2988.715108]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 2988.716146]  kernfs_create_dir_ns+0x9c/0x230
[ 2988.717030]  cgroup_mkdir+0x318/0xf50
[ 2988.717816]  ? cgroup_destroy_locked+0x710/0x710
[ 2988.718770]  kernfs_iop_mkdir+0x14d/0x1e0
[ 2988.719601]  vfs_mkdir+0x493/0x700
[ 2988.720320]  do_mkdirat+0x150/0x2b0
[ 2988.721059]  ? user_path_create+0xf0/0xf0
[ 2988.721899]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2988.722958]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2988.724003]  do_syscall_64+0x33/0x40
[ 2988.724752]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 2988.725793] RIP: 0033:0x7f0ce482cb19
[ 2988.726540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
00:56:50 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
fchown(0xffffffffffffffff, 0x0, r4)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000280)=0xc)
lstat(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x400, 0x0, 0x0, 0x1000008, &(0x7f0000000b00)={[{@huge_within_size}, {@gid={'gid', 0x3d, r6}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x67, 0x6b]}}, {@huge_advise}, {@huge_advise}, {@huge_always}, {@size={'size', 0x3d, [0x78, 0x25, 0x37, 0x70, 0x70, 0x39, 0x67, 0x67, 0x70, 0x2d]}}, {@size={'size', 0x3d, [0x0, 0x74, 0x6d, 0x25, 0x6d, 0x32, 0x30, 0x36]}}], [{@subj_user}]})
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {0x1, 0x8}, [{0x2, 0x4, r3}, {0x2, 0x1, 0xee00}, {0x2, 0x6, r3}], {0x4, 0x3}, [{0x8, 0x1, r5}, {0x8, 0x4, r6}], {0x10, 0x1}, {0x20, 0x3}}, 0x4c, 0x0)

[ 2988.730279] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2988.731961] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 2988.733386] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2988.734828] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2988.736249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2988.737695] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
[ 2988.848158] tmpfs: Unsupported parameter 'huge'
00:57:05 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0)
inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x80000060)

00:57:05 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
getpeername(r3, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x80)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:05 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:57:05 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40082)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r4, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6, 0x3, &(0x7f0000000240)="04f8186b7b70f35576c28161414811182b94019fdf17b70d440e331a7933e1808c59d2c8904cd87617090c4e2f6c903ccd61ef18ea885e1946fe1b71295658b22559e735da195e41aa83745231ec", 0x0, 0x0, 0x1, {0x3, r9}}, 0xcf)
r10 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r10, @ANYBLOB])
r11 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r12 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r12, @ANYBLOB])
r13 = syz_open_dev$ptys(0xc, 0x3, 0x1)
poll(&(0x7f00000001c0)=[{r10, 0x1}, {r0, 0x88}, {r7, 0x110}, {r11, 0x622}, {r0, 0x3400}, {r12, 0x2000}, {r13, 0x2040}], 0x7, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:57:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000200)=0xb)
r6 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r8=>r0, {0x8}}, './file0\x00'})
ioctl$CDROMEJECT(r8, 0x5309)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:05 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

[ 3003.267736] FAULT_INJECTION: forcing a failure.
[ 3003.267736] name failslab, interval 1, probability 0, space 0, times 0
[ 3003.270529] CPU: 0 PID: 15855 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 3003.271969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3003.273692] Call Trace:
[ 3003.274261]  dump_stack+0x107/0x167
[ 3003.275029]  should_fail.cold+0x5/0xa
[ 3003.275825]  ? create_object.isra.0+0x3a/0xa20
[ 3003.276768]  should_failslab+0x5/0x20
[ 3003.277546]  kmem_cache_alloc+0x5b/0x310
[ 3003.278360]  ? mark_held_locks+0x9e/0xe0
[ 3003.279222]  create_object.isra.0+0x3a/0xa20
[ 3003.280136]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3003.281184]  kmem_cache_alloc+0x159/0x310
[ 3003.282052]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 3003.283208]  idr_get_free+0x4b5/0x8f0
[ 3003.284009]  idr_alloc_u32+0x170/0x2d0
[ 3003.284801]  ? __fprop_inc_percpu_max+0x130/0x130
[ 3003.285800]  ? lock_acquire+0x197/0x470
[ 3003.286627]  ? __kernfs_new_node+0xff/0x850
[ 3003.287514]  idr_alloc_cyclic+0x102/0x230
[ 3003.288380]  ? idr_alloc+0x130/0x130
[ 3003.289139]  ? rwlock_bug.part.0+0x90/0x90
[ 3003.290038]  __kernfs_new_node+0x117/0x850
[ 3003.290911]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3003.291877]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3003.292827]  ? pcpu_alloc+0x12a/0x1240
[ 3003.293631]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 3003.294699]  kernfs_create_dir_ns+0x9c/0x230
[ 3003.295603]  cgroup_mkdir+0x318/0xf50
[ 3003.296392]  ? cgroup_destroy_locked+0x710/0x710
[ 3003.297374]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3003.298233]  vfs_mkdir+0x493/0x700
[ 3003.298962]  do_mkdirat+0x150/0x2b0
[ 3003.299705]  ? user_path_create+0xf0/0xf0
[ 3003.300549]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3003.301616]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3003.302680]  do_syscall_64+0x33/0x40
[ 3003.303439]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 3003.304474] RIP: 0033:0x7f0ce482cb19
[ 3003.305231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3003.308948] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3003.310503] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 3003.311945] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3003.313391] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 3003.314845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3003.316286] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:57:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:05 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r6, @ANYBLOB])
syncfs(r6)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:05 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:05 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000180)={0x2, 'bond_slave_1\x00', {0x6}, 0x96})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
r5 = accept4$inet(r3, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10, 0x81000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x1d4, 0x10, 0x4, 0x70bd27, 0x25dfdbfc, {0xf}, [@generic="8f37311fd96acd666987cd07122d258c76712adb1711f30c2ccf5be7aab8404a857bde9db9aa4aeec2fd108caf2f30d0c32184381f7cf9371ae42eb2e5aab09617d8d205235fec6286b90f8174e446abbc88438873f64437038f2e82005bd5f11b584336fc11f163bb7b0a763b26fa74f78d95efc7698d8be8ae3885eb69c50e56a83615db6a4d4476d61b9ec2df0ed5ebf0429707bd997a9e0083177efbe3e0f5746263800aa8c4c41a346947e27c812875ea218596e92c8495e6ab6be522fed69e1165578319d530c62636d23affb85147d55ecebc9f33235db8575973e2867c8537629e83", @generic="65fb97642215aebf562ca2a994bceaa3b9aa8b07d68be83b0a7ae3377d3e98a7fc6c87600d82ce5b5dad4bd6ca32adf805de054deec228a3db9d0680068c60ea109aaaef7595e1ac4794ba54b71b24649143fe53f1bea346cf05c25ae480156b18d2ae3ca88a5315b581fa0219f5cf4b1638baa9ecfa3dcd5d7015d1a41b057e9f604a671f3f412323004749944f90f52972e87275a2f9d5e3bbe64cafe94d7fea585ca0c5617cc1129e660da688c8ddd97603ae16b4aca2658f50e242409d2889c17df8ba0e830cc19e", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x83, 0x0, 0x0, @fd=r3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:57:05 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x880, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000b00)={0xf8, 0x26, 0x4, 0x70bd29, 0x25dfdbfb, {0x1e}, [@generic="c9017d7a4c4988401df11187af9a1832bf78ecdd658a2e4e9d4cacd1dbfe079d8cf7be530a501e5f380f7d60052c9ffbd673b993e71e4c4e12a65d56b303de85f0c75f356b23f494db21d397682a8bba5c65f98d73668d11d4622fc8901d2239fd4a4a6814cc0261ed9e8cbb3d806ac6cb0faac67908df12497b6606a54f85a09b83f3cfd568e23e44baf210994271cc1a314a7e5701616050b582ceba6f8000e6d468fca3bc6c8cc2056f9bd9e24cbb34d4767f654f5498e5bbc120cbfcceb7cb3dd99eb4f05a30b13d97d405209fdf75aff623984c08b0dcef58ce27a1df497b"]}, 0xf8}, 0x1, 0x0, 0x0, 0x2}, 0x9800)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000980))
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(0xffffffffffffffff, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:57:05 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf202000000000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:05 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

[ 3003.715588] FAULT_INJECTION: forcing a failure.
[ 3003.715588] name failslab, interval 1, probability 0, space 0, times 0
[ 3003.718123] CPU: 1 PID: 15918 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 3003.719535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3003.721226] Call Trace:
[ 3003.721791]  dump_stack+0x107/0x167
[ 3003.722551]  should_fail.cold+0x5/0xa
[ 3003.723305]  ? selinux_kernfs_init_security+0x137/0x4c0
[ 3003.724392]  ? selinux_kernfs_init_security+0x137/0x4c0
[ 3003.725461]  should_failslab+0x5/0x20
[ 3003.726243]  __kmalloc+0x72/0x390
[ 3003.726946]  selinux_kernfs_init_security+0x137/0x4c0
[ 3003.728006]  ? selinux_file_mprotect+0x610/0x610
[ 3003.728941]  ? find_held_lock+0x2c/0x110
[ 3003.729783]  ? __kernfs_new_node+0x2ad/0x850
[ 3003.730655]  ? lock_downgrade+0x6d0/0x6d0
[ 3003.731505]  ? rwlock_bug.part.0+0x90/0x90
[ 3003.732363]  security_kernfs_init_security+0x4e/0xb0
[ 3003.733405]  __kernfs_new_node+0x531/0x850
[ 3003.734266]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3003.735239]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3003.736158]  ? pcpu_alloc+0x12a/0x1240
[ 3003.736963]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 3003.738004]  kernfs_create_dir_ns+0x9c/0x230
[ 3003.738908]  cgroup_mkdir+0x318/0xf50
[ 3003.739666]  ? cgroup_destroy_locked+0x710/0x710
[ 3003.740633]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3003.741462]  vfs_mkdir+0x493/0x700
[ 3003.742209]  do_mkdirat+0x150/0x2b0
[ 3003.742942]  ? user_path_create+0xf0/0xf0
[ 3003.743789]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3003.744826]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3003.745861]  do_syscall_64+0x33/0x40
[ 3003.746595]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 3003.747610] RIP: 0033:0x7f0ce482cb19
[ 3003.748352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3003.752113] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3003.753627] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 3003.755089] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3003.756553] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 3003.758032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3003.759482] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:57:17 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:57:17 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:17 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:17 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x54, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {@with_ht={{{0x0, 0x2}, {}, @broadcast}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @void}}]]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="bb240000", @ANYRES16=r5, @ANYBLOB="200026bd7000fcdbdf25650000000c009900ff0100002a000000080002000000000008000100001000000800020001000000080002000000000008000200010000000800020001000000080002000000000008000100fdffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
fchown(0xffffffffffffffff, 0x0, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:57:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xc82, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:57:17 executing program 4:
r0 = fork()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
ptrace(0x8, r0)
ptrace(0x4207, r0)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x1, 0x253, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r8, @ANYBLOB])
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r8)
syz_io_uring_submit(r6, r7, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3016.012791] FAULT_INJECTION: forcing a failure.
[ 3016.012791] name failslab, interval 1, probability 0, space 0, times 0
[ 3016.015534] CPU: 1 PID: 15934 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 3016.016905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3016.018552] Call Trace:
[ 3016.019088]  dump_stack+0x107/0x167
[ 3016.019810]  should_fail.cold+0x5/0xa
[ 3016.020563]  ? create_object.isra.0+0x3a/0xa20
[ 3016.021472]  should_failslab+0x5/0x20
[ 3016.022251]  kmem_cache_alloc+0x5b/0x310
[ 3016.023164]  create_object.isra.0+0x3a/0xa20
[ 3016.024159]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3016.025299]  __kmalloc+0x16e/0x390
[ 3016.026134]  selinux_kernfs_init_security+0x137/0x4c0
[ 3016.027284]  ? selinux_file_mprotect+0x610/0x610
[ 3016.028340]  ? find_held_lock+0x2c/0x110
[ 3016.029256]  ? __kernfs_new_node+0x2ad/0x850
[ 3016.030248]  ? lock_downgrade+0x6d0/0x6d0
[ 3016.031180]  ? rwlock_bug.part.0+0x90/0x90
[ 3016.032137]  security_kernfs_init_security+0x4e/0xb0
[ 3016.033271]  __kernfs_new_node+0x531/0x850
[ 3016.034231]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3016.035289]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3016.036338]  ? pcpu_alloc+0x12a/0x1240
[ 3016.037217]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 3016.038398]  kernfs_create_dir_ns+0x9c/0x230
[ 3016.039388]  cgroup_mkdir+0x318/0xf50
[ 3016.040248]  ? cgroup_destroy_locked+0x710/0x710
[ 3016.041309]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3016.042254]  vfs_mkdir+0x493/0x700
[ 3016.043056]  do_mkdirat+0x150/0x2b0
[ 3016.043874]  ? user_path_create+0xf0/0xf0
[ 3016.044802]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3016.045992]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3016.047152]  do_syscall_64+0x33/0x40
[ 3016.047982]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 3016.049130] RIP: 0033:0x7f0ce482cb19
[ 3016.049973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3016.054088] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3016.055790] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 3016.057377] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3016.058974] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 3016.060568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3016.062186] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:57:17 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r1 = clone3(&(0x7f0000002c00)={0x80000000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000002a00), {0x37}, &(0x7f0000002a40)=""/72, 0x48, &(0x7f0000002ac0)=""/206, &(0x7f0000002bc0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
fcntl$lock(r0, 0x25, &(0x7f0000002c80)={0x0, 0x3, 0x4, 0x2, r1})
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r9 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000540)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r9}, 0x0)
syz_io_uring_setup(0x1c48, &(0x7f0000000240)={0x0, 0xf3d5, 0x1, 0x1, 0xa8, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)=<r12=>0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r12, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, &(0x7f0000000340)=""/152, 0x98}, 0x0, 0x0, 0x1, {0x3, r13}}, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0xdd4d79e6aeedbeb4, @fd_index, 0xdbe6, 0x11, 0x10000, 0x9, 0x1, {0x2, r6}}, 0x766e)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0xeabf)

00:57:18 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:18 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:18 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002449002e520000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000cedf0f921e0d6f83", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="d744c8f3ffd04f2d860426bffc6f0faaa9325839de653b6d6465b12cb98aaf7d236af41f66dd8a31e9a9ad40313f2279b2f5eaf436ab59ee9d13405c26b431bd47486c58d1dd7558c68d8430e8fa985ddf32a3f718853f2083d322be25d63b213386be96b5e117c4ddc4eef4c859505a828528cea025b289af", @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fchown(0xffffffffffffffff, 0x0, r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:57:18 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB])
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xf8, 0x8, 0x3f, 0x0, 0x0, 0x7, 0x8002, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x57, 0x2, @perf_config_ext={0x3, 0x9}, 0x40050, 0x9, 0x0, 0x7, 0x5, 0x6, 0x4, 0x0, 0xffffff58, 0x0, 0x1ff}, 0xffffffffffffffff, 0x7, r0, 0x2)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:57:18 executing program 6:
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x9, 0x29, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x3bbb, &(0x7f0000000340)={0x0, 0x7fa8, 0x10, 0x1, 0x3e7, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000003c0))
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)
r8 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x20010, r8, 0x8000000)
pwrite64(r7, &(0x7f0000000240)="b93f12cd8fe6211aff2e5752b7a4389dc726b484ad4f4df9b010af0c8c375a293f1447814498b49368b3075e1af8d3cd1519ce7b814006c2519afeb0e93df17a79421b39e150f0c21aab3d5b0651c83216936540e3bc3e1e3cfe92cef2314ceff4253dfeb8d513f6101b1327cad9ef579aaa657224b579c1ec8ea4d5b0b75840d96b6970411843235d6304d7de281200826c426c126148c6f8726ca36f92ea5e20798d61e8aef46c1e59ed615d8a9b0aec13e5dc051dde2a361ed21d5a742748ef498cae90d1cb18bd7c357ec2662a", 0xcf, 0x359)

00:57:31 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x56dfff7f00000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:31 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(0xffffffffffffffff, 0x0, r5)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000b00)={{0x2, 0x6}, 0x100, './file0\x00'})
open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x100)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mkdirat(r4, &(0x7f00000009c0)='./file0\x00', 0x14)
r7 = syz_open_dev$mouse(&(0x7f0000000500), 0x5, 0x111800)
sendmsg$nl_generic(r3, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000c40)={0x114, 0x1d, 0x6d78b08eada0c396, 0x70bd28, 0x25dfdbfd, {0xb}, [@nested={0x100, 0x91, 0x0, 0x1, [@generic="64a779579120a5ccf019abcf15e517a43e2075c256b9306c886f95eb6843ce2c48105098e4952e31966efed4b934f9d5bbb9187f069379cf6aacce1b22e82ec39a9f0bd7450e1ac5339831eac9286f3af1eb677535b81cbba4d2faabf5de3679772e370d2032a14558b1162a3693c0f63a52a69a11588138bf6a68ed3394fb904a94acca395f49503525185b76711e939b915ba2dad7e5312da3de9fbe2e2150b5ae33d3886a11ecdc41fe0be30ce1309838dc46ff8fa5da8ee92b9932a48d03236b83003bcf1b181350657d557fb43be9f0e8f659b33c4d905ababe", @typed={0xf, 0x49, 0x0, 0x0, @str='rpc_pipefs\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r7}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44800}, 0x4)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

00:57:31 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
fcntl$dupfd(r3, 0x0, r3)
r6 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x61ce, 0x0, &(0x7f0000000240), 0x40, &(0x7f0000000280)={[{@utf8no}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_winnt}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@obj_user={'obj_user', 0x3d, '%'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x66, 0x61, 0x38, 0x31, 0x32, 0x32, 0x65], 0x2d, [0x35, 0x33, 0x66, 0x39], 0x2d, [0x37, 0x34, 0x61, 0x30], 0x2d, [0x66, 0x33, 0x31, 0x34], 0x2d, [0x31, 0x33, 0x65, 0x32, 0x37, 0x34, 0x39, 0x65]}}}]})
syz_io_uring_submit(0x0, r5, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r6, 0x0, &(0x7f0000000340)='./file0\x00', 0x40, 0x80600, 0x12345}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:57:31 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:31 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:57:31 executing program 5:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r4 = accept$inet(r3, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x4880, 0x0)
ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000500)={0x7de, 0x1000, "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"})
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0xeabf)

00:57:31 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x36a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:31 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x13, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = dup2(r1, r0)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup2(r3, r2)
r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x1719, 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0)
r10 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000540)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x300e, @fd=r10}, 0x0)
syz_io_uring_setup(0x6675, &(0x7f0000000240)={0x0, 0xff50, 0x0, 0x3, 0x380, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000300)=<r13=>0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000004c40)=[{&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000000340)="3a3b4fb0ec8272926fbfd3afd8a1fd29caba7ba27eeb3f99ecff5339e59509653e0aff2b625ff9f80a7b159cc3d4b75330686be88d07648452010c8c56a7513c4341a8d0ff08b82e0211b5d766d168ffa3561e8b4c82f177f75a679af1", 0x5d}, {&(0x7f00000001c0)="2ae6f8f5c22d9ac881db00f2d368c936fa438b9858273eb36048be6febf20cc1572f4c13", 0x24}, {&(0x7f0000002740)="0e2c2d7369c36c3cb24af3eb9d8e82421bdc0ee6dc07278bfe4914d3946107f7a150fdef13ae78a7e9c2b331d28c3a292f2c09eaa516aa77976b877637f7b895cbb6468c1bad27d830f0f278eb4fe23271147a88be4a79411726a059dc1f8a177a616de0de76ac09ed1d6b20d817d81c0bac02c518a1adfd7702355d743bc190d9e179a8ec83e7e7ec8486ceb0eca0bf839f6147c01294dedd973cd84234655073fc11a7a9ce35bb4e8c1f58928d3ab936caa5bfb15ac95dc78089c5a6bf4e394cfdc183a41cf7ccaabb3b6068b04249e43185264e92289afdad1b3c12415f92679dc62c539b7bc08614092ed69f2f0e9c", 0xf1}, {&(0x7f00000003c0)="50c32e12463b091885e7614bdf81a3433ec24bfce8dfbbd0b0948e922077b85423a9e4bb8dd84e594401e29ac6e944c24ffba851d3b89acf3acce7016987ed454f29f94646d11e0cfa60276739ace47265cdc665df250974c9f76321e008ec823c4b106557", 0x65}, {&(0x7f0000004a00)="31fe7747d09926654e321d299efebf5dbeb28943c406bd40931b07c6e931182cf1475cb0ae776b05f7751ae4d79c9d55b45b7fdd7df702f920923fee3bf6c2790df6320cd0a074c1c4c28f9c0f63ec38795a02bd202d5115bb4bd22dd8daa246f172c70b31c4c95b6baa49b71992e8a01ae0b3007e3154ef4e8d875407e50aeb4cea22d5b9a30434fff08f5165b728bebafe80f97e67f00011e9a4e0ff9113349035982718176d9e28247b8242afa6f2a58d4ce59de18d2f99e613873f2a878cd0b84dbc95322d8fbbf512e45fe4f6d9a6c6f259922150dfb37e35cc7cbab190916767b0834488df18b8f330418a5db764", 0xf1}, {&(0x7f0000004b00)="c8826a545d58d988bd0f721d1670e8714e0e7c5646a988c2af4b269d80b3419323de7f026c76be1c72b2d154bfc6aa2a94c1f5d0ef0cc3f1889d63eab82b718bdcb761101ca2edb24f5f13d54c6df14b94c3841da6486a6fdf2d6fadc8f028a3204b28320b3d03a7c2b0bdc95704727c1f8e0d308b6855c04a43fa7a5dca8ed3b73489e1fd19a7c0ba4fef5ddcdc718de2f7d94173367474d98eb4bbd8eca9a6751bebc54793ce6de9a2906bf2204ef3f5900f9acf47a4f26d1ee9a6c2cbefcff2bed71ff9f1824202cc744db1f3c798e35f64324c90b2be437a", 0xda}, {&(0x7f0000000440)="130232ed1b587c22e3900f917a21081b06585af6584da47a2e3fbbe085e8872fc176030884aad8a347cb3a6c4aa3e39ec56d7e5c6bc5a916a855c267", 0x3c}, {&(0x7f0000004c00)="b2a40209e806629f002a64159afda56b9f624e077c67a0cffd15c891d40d810c20a7", 0x22}], 0x9, 0xc)
syz_io_uring_submit(r11, r13, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, &(0x7f0000002a00)="fb49d3c621797de24d261d1ea27ad4939e30eda55ed730a1dcc7e36e3b17f9d45afdc440e49e5482f56e1c5c049c9e94a84b8bfe39e4828d80ca96a96db4c23bfc07f9d5a1d6a7964996037620c4b1759a080d00ead8acfc649f22c2bfe10c2a9b2c3d3e79db642c1f25fbae9c5d1649b5bf7df8ac791395bb170c9ddda11f927151eae92b4f570ef06f8cf934d7751b440b9d977d0c3039e5f31414210c2e6b3ffa500d6dc07b352b5c2575f1cebefbd72d638cc7aff081a32d9e1f3e495946ce74ad866f49b494b5dbafad524f81f6903c588a609ef1f64d32d21f142749b68ce29d68a6823a588cdc09f10a12e18bede2bce11fd71041925a80cfaf67c725ca48e3a2ec2219b66bdea6317ee621914bda0775de3e224a7cc26a052a10cff82f473eb7a5a7ebdf6d7bef29435b2795f8683a64d2f383c89f27be9271bce24d65c4ebfe4fc82e686f54ab79cbdda1794283a3e5171d07b5b6fc5ff55d87b4eb4b776eba8f39d7988a1f26364b7d70e09213b22a41f087a31b0799b81c0402c42659f4bc4f670d16c8cb0b414826347e0089238156a4a6ccc6ca6437aed8734b2712323b34cb7484f1e9e29b162d0ac65c7c2a836eb9820d54ca9f59a576a948b0f83095454643ac7280bf32732158ee94fe2ef5a88a83a7f0239f4385b73527d07c16b953c83e70fa3786337506cf32e1b62dfb0cb7293902e6c241523b9c4ca0926e4c5a4884f92882b83babe9cf4f8f15e21ab1ef31e711f7af6fe4433c176853964f2edfc30adfda5139397f74b2d35a11a41d0f70f73ebf0951d85ce3e24dc2fb3b4954f35bbbb7f11d791918a579845095119ee6df06f5521accee179dc31549c55f94ff55dbd41a016f321a521c381ccc91c0dbb4606d8e624d4551cbdd575496c995737d1237639e54bb98aa0fb1572da1d2f58de15e7578f60a623186fa5fc557fd3af062c94185fc5f4e0d5335131d14e1c7d92413aba27d2258a6f29abba45fd2e6a2324f793bb7bbc05f072ef0dd0e58dcffc47e1d9cd493b3ca3f7fe75a45ff9974167c1cd41bfad37a336d1493c6840223630f4ca73fa4710e2c31c39abc88ed5495285cb3101036737a031f35fb4bc92726c7a2f784052f9dc33d9c52636684e6c2c0a501bf663acc53c0def7ee1fd6113cb2f966608335019571c2b8265768fcd348b01464b9e8d0c50aa31a13599686b63b86a084413fe3ed5d273cb82b5551bead26d000ed806277ca8a280481de7b1746d945113f2b499a5aefc2747d9f49304f97d1be74da4a3418bb27894d5d12a4d0cad55b3609fd6ffbb0a6f5cf3a65e28dd740569784a4b42adf76e25fb3f1ecc2bf9e0cb04b9a84c1efa357ec7a51f84a49f720ee02ebbaa5c5fc95e67601a9cc079540b980e6b8fceb40451c6fa4cacfc066c30912b45363003dffeccc5f3f7bb4cbad8e45fa8c65a9495f3a09f30d46ab62d54a6bce8b56b532543f95411f3582022ab958e76caa99657b3ff83ba8e6f91618ddf3c49bf23244dce70d740962042ab9f48d0a49697a32c02d90d048c3e56f6c30b517b7c36dcf6f4f916be3968a0250000688633356fe629853bf096f76328a5490cff8cf77d82ce91366496d1d0b143d04e8b60d1ab808c88cbe55698013c486f1fea3acff0cd1e474de0839a16f2ea157280c2f54057c7da818c996ed43ef74dc8382bf91c245dcaf415a35a8a32f6d3447b9fef03e0ae1b48fc507c32ed1270368d2a18e806332a0dabf86ad973c71b9e0420e3b8f92086388390d6b5c51d86490970f298c123aaa50023f47b671253b99aeb228583b39dc2f298000b12bfc9b982fa083be2b26142d07b9e828852ef15d6847fa14053be1c890987139beea1860165d88a8be573ebcbac682ceaacca73343834c7844765b24f126371f248d6fc0775dfd40b6c251f3e0946a2514dd3ee1487a5e2a575ca327943f4a9a138774808c836852492cc07986ac66fb37baf1530c9421db3fb0d0d627ee6fdc714e0958a9940508d8ded9c9704fcfe196f9878770666425643ae04826b94d052916721c32b049675e12045f53503772852e57c9e1a9fc49ed9a2e6dee8105a991afd0ac114427f4c0e95dccd69f4cd56efc719dc3c26302fe037bd02a56576b0b17bcedf8fe35c5dcf01b085803e3c6935bd6d38b47b61f5c4ca08cdeda809e4ef5caf0c48e280bb7ef2bc9f1e81f0d617696205a1f43daaaa5780c7850b108168719ab032e4490fb7b3c8b95982eb1f23ed0d05c019dcdc42dfb098b7a2c46d7bd81fa9644c14b6411d69aa0a6f1e4ad6987fb2621a75c7bbfb65e398bf73f707facca38feadb269ec9ec25c164174546c6ee12b25e8e4914167686080c27fd82a7e8d463fd9fec24d24d9382b1928d0fe5952c223c6c53668af228c56bf3c114c103e4ade35d374f5a5c4dfb0bb9d062f9fd64f89afabffb1d20ececa83c1c615fe509858822832010177db0b8c1ae6969786ba2cfd2fbd4ca8b23556b2115b60fb1549c2cf35e673e2840acbc5850c623fc81d4c03b1438408e59e4647d23a6fdf58931c09fbfb0b8dfac2867eaf0b823c84eeb4cc33ec6c7ff0d0b517f03564df69c2e8a0a70c4b7f389225e7ed7ad0685cb93ebdd6985e04759800f57f8a57ce68e0868eaf076f7efe49d3309d6c125630adbf9cfd854041ff1ba1571ce04902b79ca9dfd2838fedbd1822b37c6d61dc14113312b2ed4bb42e5acd4fff5f6ccc853eb3cda63cd0fe212fe34e6c4c7f5ec11092b71e741e711600704a3db63fbfd1b0bf637d87875c8fb7f77cd31a502d59b8a8088d30171c3a03294bcf247ab02b59b8dbf8d8bf2b58ba35c6ba7bb8690ae5b934c1d802d728664ae7fe69efee401abf35d60e971618020537480be3e76b7cade7336fc7bb083d57d1ee9c7e7f727966b462c448e45c36d5b9cc019138c0028f65f79629797c7cc72f105edb2f4ec916a98c1c4938558f1d8b85eca601a22c25eb9eaa881caa8eea90f30536be615bef0499c6b4675c797cc688db602b5ab096a5eafca7fb5cd9c9717e9237021bbed5ca53ecb00a33e73aaeb99377695cd7df838a77fc9c650dc92aca04870ce04356c30d2d2ad64ac7887f423e303d2986db8092d438d9899b5b292529cd7af505d2de1c304bb912bdf254f8a73e3be5f2581cdf3d3de6951aae36ec52c61a6657665b7279ceda7850459e9f3b935bdc50419d6d3a3f288bd87cb59fe5f945b049beb8f70ffddc10537f73b8fdc242b164e1846b3fbdb9a36fc14149951c213249b1815c28158b9bb9f9f5d71e3b54cffb2812b3149656b227b99780e2ffe2d11985b898f997a1548809e215a6f562e97ac64666d9c4fc6eab422fe7e5e8bb4b64fb5bd1118c0c267654709d5645ffdbae5fa1481ecf9906a3c04e01f8bab9be76ba92a1f58aa2bde358787d01cfbbf1cf8a09b7c06ba1dbe8fe2ae41d72e02b45778690d5f7342e8bf5b7a59b6ce4c61f002c5c6c31a06f4abc0809990d981daf148b88015337225dccf9963880fd27b4a1cf645d714ad4b3140f3541a9f6d88fd22aa06e2afafeb7ce2ba44d2fdb2c9a6a1849bd2efd35469f45fd0c07189a8f1ee8da3d3961576e26e9011e43bb564301dd2d158014dd809ebd29f8bc93f370c85e0cf29b4d719aeb955b99c275dada523fb173454f8fc404c81952ce66ae88d721ea7340ee10e8ed7312384c0ac78b4d46909ad1bf089e70074b0595367da8af9d54fdf0ddff73e38b3acacd5337f94c2fca99cd954a7d47430c1cd5b7794262c26690022ccfdc5c8d5093307abb4edcb228cb6f061f851268d759301d840879172601f8c131f87484178a1f150d5130153118f2a2c3191be8bcdc59cd40b62399f310d48e19eb1044e369c46749b455fe8830fdb010ecce4b8ccd3b9bbcfd7ff5bc1467a4320e62cda3acab06cdb7135da29c0a8f08c8e2992f2c5a0f1e835d7846749478c5bdc6e2842e49319e7610b0bc1216c2fdb3984c13cf9938c128211d0d78ce93d1cfd597656734a2864b8da79b4ad8316820d1d7e721b429cd4036c4b9804ebe9fd563a304adaeabb7ef25445c2a9cccc78d9d8c590c7efc53864344558e77e113881129050d48469a5e2c1add12b7934dc0b42d2056ebff9de97aa858e025684f44731f624771a4b3a15416d7fce6b5538873dd7050750193400674abbf6cc38f2867280eccbb1a984b4edff1ebfd666d73275b69ff466a7908ad0227be2518191789b93e01dc357b9f586cb8c3a9da32da3a123d9e2383de0347f7f412d3bb9369644b4d5b892c6b470637b528b6428d313946eb158dd74b443ea3329ad0391afe7f88349c11212e1eafbae5781404c381c6cf7b91c767e0b30199b10f493920caac2f8494ccc0ed63f7857a7fc3a346e6df0ad90f5d0c3258762d16c644d7e8364b762517fce1c337588082e87e83053f1a61af0bc5483ad5d8ff82958bf33bee779eab9dc8d43f54637059d6a25462b2463a21c1a03cb762bd390d7860282d385510c6e3ccc6daef282c1c9d2fb42d530d8c7131ae1f2c8bc33f8a17ebf79d41fc8615bc5a3c8de187970f7c7f7562ff30b32ea40338c247e9a3dde2c9fcda50fe622637537e63c538789bf5537096615b95d514b95577de62befcbaef79b68f688ba56d18ded1bab56fc26319f240a6d13ba57e790d35e45e2d38aee9e73b01b550d10a2b9a297c5a6fbb253c945336e73b648e6a51d752b8a3cab9072ef0d4c6aa3940f8101c36b28acaaebf5a25ee1538fcbf3088bd6d59b49ae123f5b1a9b382b785152ac445b519c921564d9fcbcf7ba280271a6421b09ff417614341cb219e8ff93d64be4b869412985889a6d43a8a6e44d689fc617271e9286a7424384aaba256642788440a5983e6aac848ff103d327b0c990611b4e2ad6a5bcf8991f711391fdc660f52d01f6926e4b3843acd569393b9aec2d025dd25875e93fd732835c077ea9e97ef62c6b6957516bd8e7e1eb81137f067de6e9158c05ea2b50980bddd47b86df7ccf439bbe37042022a6cd8db1a6fac1fd82f612f2f27a81ba8cfe0086098115983c450183615565b635c1f4f1775a4a3d67e812ee13d55abdcef253d40c3e5f12fbe7066749439092ae603485cc3d714632da69c9e6a53c38a3a629485ec9bcfc4a40edc5024b026eaef9f98445c616e03e8e8b39a5b704b1f530417b3a1563914db9517081b24c5079b9d3056611d17c0e538a45cd278535303be1f3a05c4ecf4e7ecf0accbb05a034223baff63967ffe71201fc8bd93fe947536552f5dd0d15f9137ca2bee610ea4f2a71dff68173be75252b5f5191fa1fcd979f35b67f90226417fb4c8dbc04643ae4af761b3a1005528703f16bda34f139f440284d811e0900a8a2e87758cf6c296f2ee8c66e5f8ba0b7e51a7da0d83feb181953656fc8da76f3fddafa489a74b5bfd840c995a594227a132e133efa759c58256a295d96adc4e1a778151d3b60772c539f6953bc453eebb2b55ee4bc971b68b71613b9592c9d3f00ab690aaf995c6e0e00d93217f2ef1ddbdc5385fb1db3bc1a9c3de86ddc873a30df02eaea7325ab892820579a8f1b8a64f1e370bf88cb1d5dd29677d54ca4aafe664b6f867688bff7e4fc3c23145a881ce14a27d5a0e85f9a8d02928db35183b4175155d5ece0f17b77d4ac2f181fe854e2b6f2f2c304382a15a632662c27c64eb0d7ec0f4db8747bdcae5645b75972aa81e3c00f890ee50a05b883be50baeab56e9df06a26051d1c00e1ede229573b8f58a57fe1deed4d012cbf27637", 0x1000, 0x40000100, 0x1}, 0x8)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r8, r9, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r14, 0x0}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r15 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r15, 0x9360, 0xeabf)

[ 3029.928676] FAULT_INJECTION: forcing a failure.
[ 3029.928676] name failslab, interval 1, probability 0, space 0, times 0
[ 3029.931520] CPU: 1 PID: 16014 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 3029.933073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3029.934914] Call Trace:
[ 3029.935470]  dump_stack+0x107/0x167
[ 3029.936307]  should_fail.cold+0x5/0xa
[ 3029.937174]  ? kvmalloc_node+0x119/0x170
[ 3029.938129]  should_failslab+0x5/0x20
[ 3029.938986]  __kmalloc_node+0x76/0x420
[ 3029.939865]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3029.940953]  kvmalloc_node+0x119/0x170
[ 3029.941833]  simple_xattr_alloc+0x43/0xa0
[ 3029.942774]  simple_xattr_set+0x75/0x610
[ 3029.943702]  kernfs_xattr_set+0x50/0x80
[ 3029.944602]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3029.945761]  ? selinux_file_mprotect+0x610/0x610
[ 3029.946833]  ? find_held_lock+0x2c/0x110
[ 3029.947769]  ? __kernfs_new_node+0x2ad/0x850
[ 3029.948769]  ? rwlock_bug.part.0+0x90/0x90
[ 3029.949751]  security_kernfs_init_security+0x4e/0xb0
[ 3029.950919]  __kernfs_new_node+0x531/0x850
[ 3029.951901]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3029.952971]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3029.954047]  ? pcpu_alloc+0x12a/0x1240
[ 3029.954944]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 3029.956129]  kernfs_create_dir_ns+0x9c/0x230
[ 3029.956775] FAT-fs (loop4): Unrecognized mount option "smackfsroot=" or missing value
[ 3029.957130]  cgroup_mkdir+0x318/0xf50
[ 3029.957158]  ? cgroup_destroy_locked+0x710/0x710
[ 3029.960419]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3029.961365]  vfs_mkdir+0x493/0x700
[ 3029.962191]  do_mkdirat+0x150/0x2b0
[ 3029.963024]  ? user_path_create+0xf0/0xf0
[ 3029.963977]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3029.965168]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3029.966352]  do_syscall_64+0x33/0x40
[ 3029.967200]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 3029.968363] RIP: 0033:0x7f0ce482cb19
[ 3029.969211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3029.973451] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3029.975182] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 3029.976829] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3029.978450] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 3029.980067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3029.981679] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
[ 3030.029071] FAT-fs (loop4): Unrecognized mount option "smackfsroot=" or missing value
00:57:31 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x942c000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:32 executing program 5:
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/111, 0x6f, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x1}, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0xeabf)

00:57:32 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4e2d000000000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:32 executing program 6:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x401, 0x4006, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2}, 0x944, 0x2, 0x7, 0x6, 0x0, 0x44, 0x5, 0x0, 0xfb1}, 0x0, 0xb, 0xffffffffffffffff, 0x9)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {0x0}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0xeabf)

00:57:32 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)

00:57:32 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:57:32 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0\x00', 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='vfat\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x10000}}, './file0\x00'})
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file1/file0\x00', 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@multicast2, @in6}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000600))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000180))
fchmodat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x7f, 0x6, 0x3f, 0x1, 0x0, 0x7, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40000, 0x400, 0xe1, 0x4, 0x5, 0x40, 0x7, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x4, r4, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[], 0x10)
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

00:57:32 executing program 3:
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getegid()
fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xee00, r1, 0x1000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001c00020000000000df9c2e5c53bd6549fd4fcd6a915f9efbd8cd52e4c1b41af911cf352e7eb02ebf56010423b250d2be0a0d97c5cc1bdd87917cb3fe8a4705e66c7b1bf5c3e3c95299c598683cca2a3096bb79a287bd60ce09ae6c5562b2d95e8db686fa65d1f92a14434143747d94394a6a7b8281dd7242e46948c4fade4afb9edb995e96d2f986cfe53988a326b024f68688ff4d9f6926eb582c87c9a584dfd3e8ace1d85f0682f517c649701175e121", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/88, 0x58}, {0x0}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/91, 0x5b}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000000100", @ANYRES32, @ANYRES32], 0xb8}}], 0x2, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000002c0)=0x80)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
r3 = dup3(r2, r0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1b, 0xb31, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001e00)={{r4}, "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"})
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getgroups(0x1, &(0x7f00000001c0)=[0xee00])
fchown(0xffffffffffffffff, 0x0, r5)
open(&(0x7f0000000200)='./file0\x00', 0x2000, 0x122)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)

[ 3030.250150] FAULT_INJECTION: forcing a failure.
[ 3030.250150] name failslab, interval 1, probability 0, space 0, times 0
[ 3030.252061] CPU: 0 PID: 16071 Comm: syz-executor.1 Not tainted 5.10.177 #1
[ 3030.253076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3030.254309] Call Trace:
[ 3030.254722]  dump_stack+0x107/0x167
[ 3030.255270]  should_fail.cold+0x5/0xa
[ 3030.255834]  ? create_object.isra.0+0x3a/0xa20
[ 3030.256525]  should_failslab+0x5/0x20
[ 3030.257089]  kmem_cache_alloc+0x5b/0x310
[ 3030.257712]  create_object.isra.0+0x3a/0xa20
[ 3030.258388]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3030.259169]  __kmalloc_track_caller+0x177/0x370
[ 3030.259885]  ? security_context_to_sid_core+0xb4/0x890
[ 3030.260677]  kmemdup_nul+0x2d/0xa0
[ 3030.261217]  security_context_to_sid_core+0xb4/0x890
[ 3030.261984]  ? security_compute_sid.part.0+0x16e0/0x16e0
[ 3030.262826]  ? do_raw_spin_lock+0x121/0x260
[ 3030.263486]  ? rwlock_bug.part.0+0x90/0x90
[ 3030.264109]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3030.264843]  ? do_raw_spin_unlock+0x4f/0x220
[ 3030.265488]  ? _raw_spin_unlock+0x1a/0x30
[ 3030.266142]  security_context_to_sid+0x35/0x50
[ 3030.266847]  selinux_kernfs_init_security+0x19d/0x4c0
[ 3030.267627]  ? selinux_file_mprotect+0x610/0x610
[ 3030.268341]  ? find_held_lock+0x2c/0x110
[ 3030.268963]  ? __kernfs_new_node+0x2ad/0x850
[ 3030.269630]  ? lock_downgrade+0x6d0/0x6d0
[ 3030.270279]  ? rwlock_bug.part.0+0x90/0x90
[ 3030.270936]  security_kernfs_init_security+0x4e/0xb0
[ 3030.271703]  __kernfs_new_node+0x531/0x850
[ 3030.272346]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3030.273063]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3030.273767]  ? pcpu_alloc+0x12a/0x1240
[ 3030.274375]  ? _find_next_bit.constprop.0+0x1a3/0x200
[ 3030.275162]  kernfs_create_dir_ns+0x9c/0x230
[ 3030.275833]  cgroup_mkdir+0x318/0xf50
[ 3030.276412]  ? cgroup_destroy_locked+0x710/0x710
[ 3030.277128]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3030.277763]  vfs_mkdir+0x493/0x700
[ 3030.278322]  do_mkdirat+0x150/0x2b0
[ 3030.278877]  ? user_path_create+0xf0/0xf0
[ 3030.279506]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3030.280301]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3030.281084]  do_syscall_64+0x33/0x40
[ 3030.281645]  entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 3030.282425] RIP: 0033:0x7f0ce482cb19
[ 3030.282991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3030.285772] RSP: 002b:00007f0ce1da2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3030.286927] RAX: ffffffffffffffda RBX: 00007f0ce493ff60 RCX: 00007f0ce482cb19
[ 3030.288002] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3030.289075] RBP: 00007f0ce1da21d0 R08: 0000000000000000 R09: 0000000000000000
[ 3030.290190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3030.291279] R13: 00007ffd1fd8980f R14: 00007f0ce1da2300 R15: 0000000000022000
00:57:32 executing program 7:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x7d39, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000190c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/1, 0x1}, {&(0x7f0000001600)=""/7, 0x7}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/36, 0x24}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/237, 0xed}], 0x9, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x1, {0x1}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netfilter\x00')

[ 3043.184647] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff888009d1ddd0 (size 144):
  comm "syz-executor.1", pid 16014, jiffies 4297696902 (age 21.106s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 7b 0d 32 64 00 00 00 00  ........{.2d....
    4a 87 62 33 00 00 00 00 7b 0d 32 64 00 00 00 00  J.b3....{.2d....
  backtrace:
    [<00000000fdce7775>] __kernfs_iattrs+0xbc/0x470
    [<00000000928f60a0>] kernfs_xattr_set+0x2b/0x80
    [<000000009928bba1>] selinux_kernfs_init_security+0x26d/0x4c0
    [<000000005bfa6621>] security_kernfs_init_security+0x4e/0xb0
    [<000000002dda7d8e>] __kernfs_new_node+0x531/0x850
    [<0000000014808ea5>] kernfs_create_dir_ns+0x9c/0x230
    [<00000000311dbb0d>] cgroup_mkdir+0x318/0xf50
    [<00000000e37ede66>] kernfs_iop_mkdir+0x14d/0x1e0
    [<00000000973992c2>] vfs_mkdir+0x493/0x700
    [<00000000a0061502>] do_mkdirat+0x150/0x2b0
    [<000000008b9ec065>] do_syscall_64+0x33/0x40
    [<000000000f41548b>] entry_SYSCALL_64_after_hwframe+0x61/0xc6

BUG: leak checking failed

VM DIAGNOSIS:
00:57:53  Registers:
info registers vcpu 0
RAX=ffffffff83e4c080 RBX=0000000000000000 RCX=ffffffff83e3415c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e4c688 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38
R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001
R12=0000000000000000 R13=ffffffff8566fcc8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e4c08e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3e670d2020 CR3=000000000b9f8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e
XMM02=2934343120657a697328203064646431 XMM03=3120646970202c22312e726f74756365
XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020
XMM06=65747962203233207473726966282070 XMM07=31322065676128203230393639363739
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83e4c080 RBX=0000000000000001 RCX=ffffffff83e3415c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e4c688 RBP=ffffed100112d000 RSP=ffff88800897fe70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff8566fcc8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e4c08e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff3224d240 CR3=0000000017a5c000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000416331bc00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000