00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:16:47 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:16:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:16:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:16:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:16:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:16:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:05 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:05 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:05 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), 0x0, 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:05 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), 0x0, 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:05 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:19 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:19 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:19 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:19 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:19 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), 0x0, 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:19 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:20 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:20 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:20 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:20 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:20 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:20 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1809.354073] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1809.354967] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1809.355615] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1809.356215] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1809.356924] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:17:34 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:34 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:34 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:34 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:34 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f00000194c0), 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:34 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:35 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:35 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 1823.939662] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:17:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:35 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:35 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f00000194c0), 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:35 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 1824.170856] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1824.172886] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1824.173735] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1824.174441] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1824.175245] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1824.227763] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:17:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1824.336750] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1824.337683] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1824.338423] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1824.339005] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1824.339697] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 10:17:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f00000194c0), 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:49 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:49 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:49 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 1838.238121] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:17:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{0x0, 0x0, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:17:49 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:17:49 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:17:49 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:17:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1838.512029] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1838.513126] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1838.513785] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1838.514427] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1838.515178] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1838.542875] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:18:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:04 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:04 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:18:04 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:04 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:04 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{0x0, 0x0, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1853.748825] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 1853.769492] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1853.770637] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1853.771383] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1853.772097] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1853.772855] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:18:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:05 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{0x0, 0x0, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:05 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:05 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1853.948825] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1853.949845] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1853.950558] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1853.951260] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1853.951992] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:18:05 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:18:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:05 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1854.067698] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:18:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:20 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:20 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:18:20 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:20 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180), 0x0, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:20 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1869.604040] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:18:20 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:20 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:21 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180), 0x0, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:21 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 1869.902812] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:18:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x0, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:18:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180), 0x0, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1886.137803] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:18:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1886.210004] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1886.211028] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1886.211758] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1886.212417] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1886.213177] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 10:18:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x0, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141a", 0x16, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240), 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:18:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1886.518206] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 1886.772543] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1886.775404] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1886.777294] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1886.779138] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1886.781203] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:18:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:54 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x0, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:54 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:54 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:54 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141a", 0x16, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:54 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:18:54 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1903.000152] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:18:54 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:18:54 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141a", 0x16, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:18:54 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:18:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1903.325718] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 1903.726674] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1903.727566] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1903.728233] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1903.728826] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1903.729509] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:19:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:08 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:08 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4", 0x21, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:08 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:19:08 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:19:08 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1917.841619] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:09 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:19:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:19:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4", 0x21, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:09 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(0x0, &(0x7f00000003c0), &(0x7f0000000400)) [ 1918.043664] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:21 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:21 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4", 0x21, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:21 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:19:21 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(0x0, &(0x7f00000003c0), &(0x7f0000000400)) 10:19:21 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1930.635909] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:21 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:21 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e9442", 0x27, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(0x0, &(0x7f00000003c0), &(0x7f0000000400)) [ 1930.791976] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1930.793371] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1930.794140] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1930.794860] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1930.795700] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:19:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1930.951907] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 1931.147296] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1931.148278] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1931.148857] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1931.149467] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1931.150117] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:19:40 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:40 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e9442", 0x27, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:40 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:40 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), 0x0, &(0x7f0000000400)) 10:19:40 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:40 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 1949.852750] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:41 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:41 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:41 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e9442", 0x27, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:41 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), 0x0, &(0x7f0000000400)) 10:19:41 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:41 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), 0x0, &(0x7f0000000400)) [ 1950.274427] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1950.324630] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1950.326193] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1950.327318] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1950.328386] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1950.329604] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:19:41 executing program 1: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:41 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 1950.526232] perf: interrupt took too long (9708 > 9702), lowering kernel.perf_event_max_sample_rate to 20000 10:19:55 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b", 0x2a, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), 0x0) 10:19:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:19:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1964.433845] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), 0x0) 10:19:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b", 0x2a, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:19:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:19:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1964.733146] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1964.734930] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1964.736076] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1964.737126] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1964.738340] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1964.784586] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:19:56 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), 0x0) 10:20:09 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e9442", 0x27, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b", 0x2a, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:20:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1978.377877] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 1978.384657] FAT-fs (loop5): Unrecognized mount option "roDir" or missing value 10:20:09 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x0, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:20:09 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66", 0x2b, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1978.579549] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:20:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:20:09 executing program 5: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:20:22 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:20:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66", 0x2b, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1991.111639] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1991.112662] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1991.113337] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1991.113951] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 1991.114687] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 10:20:22 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(0x0, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:20:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 1991.253313] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:20:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:20:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66", 0x2b, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:20:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:20:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2006.259312] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:20:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:20:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2006.483470] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:20:51 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:51 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:20:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:20:51 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, 0x0, 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:51 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:51 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2020.750835] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:20:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2020.881961] FAT-fs (loop5): Unrecognized mount option "roDir" or missing value 10:20:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:52 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:52 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:20:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:20:52 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 2021.091717] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2021.094769] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2021.095862] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2021.096596] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2021.097278] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2021.098049] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 2021.140602] FAT-fs (loop5): Unrecognized mount option "roDir" or missing value 10:20:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x0, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:21:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:21:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2035.974188] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:21:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x0, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2036.206339] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:21:07 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x0, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2036.324958] FAT-fs (loop5): Unrecognized mount option "roDir" or missing value 10:21:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x0, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:22 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:21:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:22 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2051.096627] FAT-fs (loop4): Unrecognized mount option "roDir" or missing value [ 2051.112865] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:21:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2051.211852] FAT-fs (loop5): Unrecognized mount option "roDir" or missing value 10:21:22 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, 0x0) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:22 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, 0x0, 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) lseek(0xffffffffffffffff, 0x4, 0x4) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) [ 2051.346847] FAT-fs (loop4): Unrecognized mount option "roDir" or missing value 10:21:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:36 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:36 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, 0x0, 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:21:36 executing program 5: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:36 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:36 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, 0x0) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:36 executing program 5: inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='ext4\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x100200, 0x0) r2 = dup(0xffffffffffffffff) r3 = dup2(r0, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x9}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x300}, 0xc) chmod(&(0x7f0000000000)='./file0\x00', 0x0) flock(r2, 0xd) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x3, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000000c0)) 10:21:37 executing program 4: inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='ext4\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x100200, 0x0) r2 = dup(0xffffffffffffffff) r3 = dup2(r0, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x9}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x300}, 0xc) chmod(&(0x7f0000000000)='./file0\x00', 0x0) flock(r2, 0xd) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x3, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000000c0)) 10:21:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, 0x0) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) 10:21:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2066.127653] FAULT_INJECTION: forcing a failure. [ 2066.127653] name failslab, interval 1, probability 0, space 0, times 1 [ 2066.129237] CPU: 0 PID: 22281 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2066.129844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2066.130561] Call Trace: [ 2066.130802] dump_stack+0x107/0x167 [ 2066.131121] should_fail.cold+0x5/0xa [ 2066.131465] should_failslab+0x5/0x20 [ 2066.131809] kmem_cache_alloc_bulk+0x4b/0x320 [ 2066.132210] io_submit_sqes+0x6f76/0x85c0 [ 2066.132598] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2066.133034] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2066.133472] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2066.133901] ? lock_downgrade+0x6d0/0x6d0 [ 2066.134273] ? find_held_lock+0x2c/0x110 [ 2066.134636] ? io_submit_sqes+0x85c0/0x85c0 [ 2066.135020] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2066.135446] ? wait_for_completion_io+0x270/0x270 [ 2066.135872] ? rcu_read_lock_any_held+0x75/0xa0 [ 2066.136282] ? vfs_write+0x354/0xa70 [ 2066.136639] ? fput_many+0x2f/0x1a0 [ 2066.136975] ? ksys_write+0x1a9/0x260 [ 2066.137322] ? __ia32_sys_read+0xb0/0xb0 [ 2066.137684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2066.138160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2066.138632] do_syscall_64+0x33/0x40 [ 2066.138999] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2066.139453] RIP: 0033:0x7f16bf6bfb19 [ 2066.139791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2066.141430] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2066.142129] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2066.142785] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2066.143428] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2066.144054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.144712] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 [ 2080.561980] FAULT_INJECTION: forcing a failure. [ 2080.561980] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.563463] CPU: 1 PID: 22389 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2080.564031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.564736] Call Trace: [ 2080.565005] dump_stack+0x107/0x167 [ 2080.565342] should_fail.cold+0x5/0xa [ 2080.565709] ? getname_flags.part.0+0x50/0x4f0 [ 2080.566138] should_failslab+0x5/0x20 [ 2080.566501] kmem_cache_alloc+0x5b/0x310 [ 2080.566877] getname_flags.part.0+0x50/0x4f0 [ 2080.567269] getname_flags+0x9a/0xe0 [ 2080.567635] do_mkdirat+0x8f/0x2b0 [ 2080.567970] ? user_path_create+0xf0/0xf0 [ 2080.568359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.568893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.569388] do_syscall_64+0x33/0x40 [ 2080.569727] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2080.570195] RIP: 0033:0x7fe0a7580b19 [ 2080.570554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.572250] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2080.572969] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2080.573641] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2080.574311] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2080.574982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2080.575624] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2080.615145] FAT-fs (loop7): bogus number of reserved sectors [ 2080.615803] FAT-fs (loop7): Can't find a valid FAT filesystem 10:21:51 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:51 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 10:21:51 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[]) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:21:51 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:21:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:21:51 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:21:51 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2080.663758] FAULT_INJECTION: forcing a failure. [ 2080.663758] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.665244] CPU: 0 PID: 22471 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2080.665942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.666787] Call Trace: [ 2080.667080] dump_stack+0x107/0x167 [ 2080.667424] should_fail.cold+0x5/0xa [ 2080.667835] ? create_object.isra.0+0x3a/0xa20 [ 2080.668315] should_failslab+0x5/0x20 [ 2080.668818] kmem_cache_alloc+0x5b/0x310 [ 2080.669239] create_object.isra.0+0x3a/0xa20 [ 2080.669696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2080.670218] kmem_cache_alloc_bulk+0x168/0x320 [ 2080.670665] io_submit_sqes+0x6f76/0x85c0 [ 2080.671096] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2080.671587] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2080.672051] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2080.672560] ? lock_downgrade+0x6d0/0x6d0 [ 2080.672995] ? find_held_lock+0x2c/0x110 [ 2080.673411] ? io_submit_sqes+0x85c0/0x85c0 [ 2080.673871] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2080.674378] ? wait_for_completion_io+0x270/0x270 [ 2080.674880] ? rcu_read_lock_any_held+0x75/0xa0 [ 2080.675364] ? vfs_write+0x354/0xa70 [ 2080.675740] ? fput_many+0x2f/0x1a0 [ 2080.676120] ? ksys_write+0x1a9/0x260 [ 2080.676515] ? __ia32_sys_read+0xb0/0xb0 [ 2080.676973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.677512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.678056] do_syscall_64+0x33/0x40 [ 2080.678451] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2080.678971] RIP: 0033:0x7f16bf6bfb19 [ 2080.679361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.685249] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2080.686026] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2080.686727] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2080.687437] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 10:21:51 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[]) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2080.688156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2080.688922] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 [ 2080.726508] FAULT_INJECTION: forcing a failure. [ 2080.726508] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.727857] CPU: 0 PID: 22494 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2080.728492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.730339] Call Trace: [ 2080.731017] dump_stack+0x107/0x167 [ 2080.731987] should_fail.cold+0x5/0xa [ 2080.733003] ? create_object.isra.0+0x3a/0xa20 [ 2080.734201] should_failslab+0x5/0x20 [ 2080.735219] kmem_cache_alloc+0x5b/0x310 [ 2080.736279] ? ksys_write+0x21a/0x260 [ 2080.737198] create_object.isra.0+0x3a/0xa20 [ 2080.738173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 10:21:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2080.739368] kmem_cache_alloc+0x159/0x310 [ 2080.745084] getname_flags.part.0+0x50/0x4f0 [ 2080.746278] getname_flags+0x9a/0xe0 [ 2080.747310] do_mkdirat+0x8f/0x2b0 [ 2080.748249] ? user_path_create+0xf0/0xf0 [ 2080.749370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.750643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.751943] do_syscall_64+0x33/0x40 [ 2080.752867] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2080.754097] RIP: 0033:0x7fe0a7580b19 [ 2080.754523] FAT-fs (loop7): bogus number of reserved sectors [ 2080.754981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.754990] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2080.755006] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2080.755014] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2080.755022] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2080.755030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2080.755038] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2080.761960] FAT-fs (loop7): Can't find a valid FAT filesystem 10:21:51 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 10:22:06 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:06 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[]) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:22:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:06 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2095.158262] FAULT_INJECTION: forcing a failure. [ 2095.158262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2095.159498] CPU: 1 PID: 22627 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2095.160046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 10:22:06 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2095.160694] Call Trace: [ 2095.160947] dump_stack+0x107/0x167 [ 2095.161244] should_fail.cold+0x5/0xa [ 2095.161556] strncpy_from_user+0x34/0x470 [ 2095.161900] getname_flags.part.0+0x95/0x4f0 [ 2095.162258] getname_flags+0x9a/0xe0 [ 2095.162576] do_mkdirat+0x8f/0x2b0 [ 2095.162880] ? user_path_create+0xf0/0xf0 [ 2095.163231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.163656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.164077] do_syscall_64+0x33/0x40 [ 2095.164378] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.169093] RIP: 0033:0x7fe0a7580b19 [ 2095.169402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.170852] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2095.171456] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2095.172053] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2095.172631] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.172689] FAULT_INJECTION: forcing a failure. [ 2095.172689] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.173215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.173223] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2095.176332] CPU: 0 PID: 22626 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2095.177213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.178056] Call Trace: [ 2095.178338] dump_stack+0x107/0x167 [ 2095.178720] should_fail.cold+0x5/0xa [ 2095.179114] ? create_object.isra.0+0x3a/0xa20 [ 2095.179582] should_failslab+0x5/0x20 [ 2095.179979] kmem_cache_alloc+0x5b/0x310 [ 2095.180406] ? mark_held_locks+0x9e/0xe0 [ 2095.180872] create_object.isra.0+0x3a/0xa20 [ 2095.181334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.181865] kmem_cache_alloc_bulk+0x168/0x320 [ 2095.182350] io_submit_sqes+0x6f76/0x85c0 [ 2095.182791] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2095.183303] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2095.183803] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2095.184297] ? lock_downgrade+0x6d0/0x6d0 [ 2095.184719] ? find_held_lock+0x2c/0x110 [ 2095.185314] ? io_submit_sqes+0x85c0/0x85c0 [ 2095.185760] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.186251] ? wait_for_completion_io+0x270/0x270 [ 2095.186733] ? rcu_read_lock_any_held+0x75/0xa0 [ 2095.187199] ? vfs_write+0x354/0xa70 [ 2095.187570] ? fput_many+0x2f/0x1a0 [ 2095.187938] ? ksys_write+0x1a9/0x260 [ 2095.188326] ? __ia32_sys_read+0xb0/0xb0 [ 2095.188767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.189335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.189858] do_syscall_64+0x33/0x40 [ 2095.190241] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.190761] RIP: 0033:0x7f16bf6bfb19 [ 2095.191137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.193150] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2095.193930] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2095.194670] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2095.195406] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.196169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.196903] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 10:22:06 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2095.403541] FAT-fs (loop7): bogus number of reserved sectors [ 2095.404435] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 2095.480722] FAULT_INJECTION: forcing a failure. [ 2095.480722] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.482330] CPU: 0 PID: 22747 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2095.483013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.483828] Call Trace: [ 2095.484100] dump_stack+0x107/0x167 [ 2095.484466] should_fail.cold+0x5/0xa [ 2095.484866] ? __d_alloc+0x2a/0x990 [ 2095.485239] should_failslab+0x5/0x20 [ 2095.485621] kmem_cache_alloc+0x5b/0x310 [ 2095.486025] ? __d_lookup+0x3bf/0x760 [ 2095.486406] __d_alloc+0x2a/0x990 [ 2095.486759] d_alloc+0x46/0x1c0 [ 2095.487098] __lookup_hash+0xcc/0x190 [ 2095.487480] filename_create+0x186/0x4a0 [ 2095.487883] ? filename_parentat+0x570/0x570 [ 2095.488324] ? getname_flags.part.0+0x1dd/0x4f0 [ 2095.488830] do_mkdirat+0xa2/0x2b0 [ 2095.489190] ? user_path_create+0xf0/0xf0 [ 2095.489607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.490125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.490640] do_syscall_64+0x33/0x40 [ 2095.491010] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.491516] RIP: 0033:0x7fe0a7580b19 [ 2095.491885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.493698] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2095.494448] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2095.495150] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2095.495852] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.496554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.497268] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:22:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:06 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:06 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB]) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2095.594690] FAULT_INJECTION: forcing a failure. [ 2095.594690] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.596285] CPU: 1 PID: 22749 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2095.596933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.597675] Call Trace: [ 2095.597931] dump_stack+0x107/0x167 [ 2095.598270] should_fail.cold+0x5/0xa [ 2095.598624] ? create_object.isra.0+0x3a/0xa20 [ 2095.599045] should_failslab+0x5/0x20 [ 2095.599398] kmem_cache_alloc+0x5b/0x310 [ 2095.599779] ? mark_held_locks+0x9e/0xe0 [ 2095.600161] create_object.isra.0+0x3a/0xa20 [ 2095.600574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.601054] kmem_cache_alloc_bulk+0x168/0x320 [ 2095.601486] io_submit_sqes+0x6f76/0x85c0 [ 2095.601881] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2095.602359] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2095.602818] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2095.603271] ? lock_downgrade+0x6d0/0x6d0 [ 2095.603658] ? find_held_lock+0x2c/0x110 [ 2095.604049] ? io_submit_sqes+0x85c0/0x85c0 [ 2095.604466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2095.604943] ? wait_for_completion_io+0x270/0x270 [ 2095.605401] ? rcu_read_lock_any_held+0x75/0xa0 [ 2095.605837] ? vfs_write+0x354/0xa70 [ 2095.606190] ? fput_many+0x2f/0x1a0 [ 2095.606544] ? ksys_write+0x1a9/0x260 [ 2095.606906] ? __ia32_sys_read+0xb0/0xb0 [ 2095.607298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.607794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.608292] do_syscall_64+0x33/0x40 [ 2095.608647] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.609144] RIP: 0033:0x7f16bf6bfb19 [ 2095.609497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.611177] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2095.611881] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2095.612552] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2095.613266] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.613921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.614578] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 10:22:06 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2095.645816] FAT-fs (loop7): bogus number of reserved sectors [ 2095.646684] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:06 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 2095.727770] FAULT_INJECTION: forcing a failure. [ 2095.727770] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.729241] CPU: 0 PID: 22763 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2095.729836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.730549] Call Trace: [ 2095.730790] dump_stack+0x107/0x167 [ 2095.731112] should_fail.cold+0x5/0xa [ 2095.731454] ? create_object.isra.0+0x3a/0xa20 [ 2095.731871] should_failslab+0x5/0x20 [ 2095.732238] kmem_cache_alloc+0x5b/0x310 [ 2095.732610] create_object.isra.0+0x3a/0xa20 [ 2095.733018] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.733467] kmem_cache_alloc+0x159/0x310 [ 2095.733830] ? __d_lookup+0x3bf/0x760 [ 2095.734173] __d_alloc+0x2a/0x990 [ 2095.734482] d_alloc+0x46/0x1c0 [ 2095.734778] __lookup_hash+0xcc/0x190 [ 2095.735116] filename_create+0x186/0x4a0 [ 2095.735473] ? filename_parentat+0x570/0x570 [ 2095.735861] ? getname_flags.part.0+0x1dd/0x4f0 [ 2095.736275] do_mkdirat+0xa2/0x2b0 [ 2095.736590] ? user_path_create+0xf0/0xf0 [ 2095.736987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2095.737451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.737951] do_syscall_64+0x33/0x40 [ 2095.738319] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.738784] RIP: 0033:0x7fe0a7580b19 [ 2095.739114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.740717] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2095.741398] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2095.742045] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2095.742682] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.743307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.743930] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:22:06 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB]) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:22:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2095.876869] FAT-fs (loop7): bogus number of reserved sectors [ 2095.877693] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 10:22:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB]) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:22:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2111.259680] FAULT_INJECTION: forcing a failure. [ 2111.259680] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.260813] CPU: 1 PID: 22884 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2111.261484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.262288] Call Trace: [ 2111.262555] dump_stack+0x107/0x167 [ 2111.262921] should_fail.cold+0x5/0xa [ 2111.263298] ? create_object.isra.0+0x3a/0xa20 [ 2111.263753] should_failslab+0x5/0x20 [ 2111.264135] kmem_cache_alloc+0x5b/0x310 [ 2111.264536] ? mark_held_locks+0x9e/0xe0 [ 2111.264997] create_object.isra.0+0x3a/0xa20 [ 2111.265432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.265942] kmem_cache_alloc_bulk+0x168/0x320 [ 2111.266401] io_submit_sqes+0x6f76/0x85c0 [ 2111.266811] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2111.267442] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2111.267962] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2111.268466] ? lock_downgrade+0x6d0/0x6d0 [ 2111.268892] ? find_held_lock+0x2c/0x110 [ 2111.269329] ? io_submit_sqes+0x85c0/0x85c0 [ 2111.269794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.270306] ? wait_for_completion_io+0x270/0x270 [ 2111.270819] ? rcu_read_lock_any_held+0x75/0xa0 [ 2111.271308] ? vfs_write+0x354/0xa70 [ 2111.271704] ? fput_many+0x2f/0x1a0 [ 2111.272093] ? ksys_write+0x1a9/0x260 [ 2111.272494] ? __ia32_sys_read+0xb0/0xb0 [ 2111.272941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.273408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.273861] do_syscall_64+0x33/0x40 [ 2111.274186] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2111.274628] RIP: 0033:0x7f16bf6bfb19 [ 2111.274957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.276518] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2111.277411] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2111.278162] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2111.278911] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.279657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.280402] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 [ 2111.352830] FAULT_INJECTION: forcing a failure. [ 2111.352830] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.354346] CPU: 1 PID: 22895 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2111.355070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.355937] Call Trace: [ 2111.356214] dump_stack+0x107/0x167 [ 2111.356600] should_fail.cold+0x5/0xa [ 2111.357010] ? create_object.isra.0+0x3a/0xa20 [ 2111.357491] should_failslab+0x5/0x20 [ 2111.357903] kmem_cache_alloc+0x5b/0x310 [ 2111.358341] create_object.isra.0+0x3a/0xa20 [ 2111.358810] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.359349] kmem_cache_alloc+0x159/0x310 [ 2111.359801] __d_alloc+0x2a/0x990 [ 2111.360169] ? dput+0x1ae/0xcd0 [ 2111.360522] d_alloc+0x46/0x1c0 [ 2111.360880] __lookup_hash+0xcc/0x190 [ 2111.361235] filename_create+0x186/0x4a0 [ 2111.361592] ? filename_parentat+0x570/0x570 [ 2111.361977] ? getname_flags.part.0+0x1dd/0x4f0 [ 2111.362389] do_mkdirat+0xa2/0x2b0 [ 2111.362704] ? user_path_create+0xf0/0xf0 [ 2111.363075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.363532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.363988] do_syscall_64+0x33/0x40 [ 2111.364313] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2111.364763] RIP: 0033:0x7fe0a7580b19 [ 2111.365137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.367011] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2111.367781] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2111.368400] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2111.369032] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.370474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.371224] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:22:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2111.418554] FAT-fs (loop7): bogus number of reserved sectors [ 2111.419458] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=is']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:22:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:22:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2111.655958] FAT-fs (loop7): bogus number of reserved sectors [ 2111.658231] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2111.714351] FAULT_INJECTION: forcing a failure. [ 2111.714351] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.717471] CPU: 0 PID: 23024 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2111.719119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.721091] Call Trace: [ 2111.721727] dump_stack+0x107/0x167 [ 2111.722588] should_fail.cold+0x5/0xa [ 2111.723502] ? create_object.isra.0+0x3a/0xa20 [ 2111.724582] should_failslab+0x5/0x20 [ 2111.725492] kmem_cache_alloc+0x5b/0x310 [ 2111.726463] create_object.isra.0+0x3a/0xa20 [ 2111.727516] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.728713] __kmalloc+0x16e/0x390 [ 2111.729580] cgroup_mkdir+0x254/0xf50 [ 2111.730494] ? cgroup_destroy_locked+0x710/0x710 [ 2111.731615] kernfs_iop_mkdir+0x14d/0x1e0 [ 2111.732590] vfs_mkdir+0x493/0x700 [ 2111.733438] do_mkdirat+0x150/0x2b0 [ 2111.734301] ? user_path_create+0xf0/0xf0 [ 2111.735279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.736525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.737768] do_syscall_64+0x33/0x40 [ 2111.738664] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2111.739881] RIP: 0033:0x7fe0a7580b19 [ 2111.740773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.745205] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2111.747018] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2111.748698] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2111.750400] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.752079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.753805] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:22:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:22:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:22:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:22:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 10:22:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=is']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:22:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2126.448920] FAULT_INJECTION: forcing a failure. [ 2126.448920] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.450155] CPU: 0 PID: 23044 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2126.450848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.451675] Call Trace: [ 2126.451955] dump_stack+0x107/0x167 [ 2126.452334] should_fail.cold+0x5/0xa [ 2126.452732] ? create_object.isra.0+0x3a/0xa20 [ 2126.453214] should_failslab+0x5/0x20 [ 2126.453599] kmem_cache_alloc+0x5b/0x310 [ 2126.453999] create_object.isra.0+0x3a/0xa20 [ 2126.454432] kmemleak_alloc_percpu+0xa0/0x100 [ 2126.454892] pcpu_alloc+0x4e2/0x1240 [ 2126.455283] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2126.455760] percpu_ref_init+0x31/0x3d0 [ 2126.456189] cgroup_mkdir+0x28b/0xf50 [ 2126.456552] ? cgroup_destroy_locked+0x710/0x710 [ 2126.456980] kernfs_iop_mkdir+0x14d/0x1e0 [ 2126.457377] vfs_mkdir+0x493/0x700 [ 2126.457699] do_mkdirat+0x150/0x2b0 [ 2126.458024] ? user_path_create+0xf0/0xf0 [ 2126.458400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.458872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.459341] do_syscall_64+0x33/0x40 [ 2126.459698] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2126.460216] RIP: 0033:0x7fe0a7580b19 [ 2126.460584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.462251] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2126.462933] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2126.463577] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2126.464204] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.464855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.465617] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2126.478676] FAULT_INJECTION: forcing a failure. [ 2126.478676] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.479862] CPU: 0 PID: 23059 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2126.485643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.486398] Call Trace: [ 2126.486654] dump_stack+0x107/0x167 [ 2126.487019] should_fail.cold+0x5/0xa [ 2126.487389] ? create_object.isra.0+0x3a/0xa20 [ 2126.487841] should_failslab+0x5/0x20 [ 2126.488215] kmem_cache_alloc+0x5b/0x310 [ 2126.488621] ? mark_held_locks+0x9e/0xe0 [ 2126.489024] create_object.isra.0+0x3a/0xa20 [ 2126.489491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2126.489998] kmem_cache_alloc_bulk+0x168/0x320 [ 2126.490434] io_submit_sqes+0x6f76/0x85c0 [ 2126.490821] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2126.491305] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2126.491759] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2126.492220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.492688] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2126.493081] ? trace_hardirqs_on+0x5b/0x180 [ 2126.493516] ? io_submit_sqes+0x85c0/0x85c0 [ 2126.493919] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2126.494330] ? finish_task_switch+0x126/0x5d0 [ 2126.494739] ? finish_task_switch+0xef/0x5d0 [ 2126.495149] ? __switch_to+0x572/0xf70 [ 2126.495504] ? __switch_to_asm+0x3a/0x60 [ 2126.495861] ? __switch_to_asm+0x34/0x60 [ 2126.496236] ? __schedule+0x82c/0x1ea0 [ 2126.496591] ? io_schedule_timeout+0x140/0x140 [ 2126.496994] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2126.497445] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2126.497921] ? ksys_write+0x1a9/0x260 [ 2126.498275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.498743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.499206] do_syscall_64+0x33/0x40 [ 2126.499546] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2126.500006] RIP: 0033:0x7f16bf6bfb19 [ 2126.500335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.502093] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2126.502804] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2126.503472] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2126.504156] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.504820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.505488] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 [ 2126.520536] FAT-fs (loop7): bogus number of reserved sectors [ 2126.521291] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2126.746640] FAULT_INJECTION: forcing a failure. [ 2126.746640] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.748278] CPU: 0 PID: 23171 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2126.748893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2126.749670] Call Trace: [ 2126.749914] dump_stack+0x107/0x167 [ 2126.750238] should_fail.cold+0x5/0xa [ 2126.750579] ? create_object.isra.0+0x3a/0xa20 [ 2126.750996] should_failslab+0x5/0x20 [ 2126.751344] kmem_cache_alloc+0x5b/0x310 [ 2126.751707] ? mark_held_locks+0x9e/0xe0 [ 2126.752073] create_object.isra.0+0x3a/0xa20 [ 2126.752472] kmemleak_alloc_percpu+0xa0/0x100 10:22:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=is']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2126.752873] pcpu_alloc+0x4e2/0x1240 [ 2126.753243] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2126.753691] percpu_ref_init+0x31/0x3d0 [ 2126.754058] cgroup_mkdir+0x28b/0xf50 [ 2126.754400] ? cgroup_destroy_locked+0x710/0x710 [ 2126.754989] kernfs_iop_mkdir+0x14d/0x1e0 [ 2126.755363] vfs_mkdir+0x493/0x700 [ 2126.755685] do_mkdirat+0x150/0x2b0 [ 2126.756012] ? user_path_create+0xf0/0xf0 [ 2126.756385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.756850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.757356] do_syscall_64+0x33/0x40 [ 2126.757687] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2126.758138] RIP: 0033:0x7fe0a7580b19 [ 2126.758470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.760078] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2126.760749] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2126.761406] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2126.762031] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.762659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.763284] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:22:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:22:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:38 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2126.843251] FAT-fs (loop7): bogus number of reserved sectors [ 2126.844383] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2127.118480] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2127.119506] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2127.120989] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2127.122490] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2127.123910] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 2141.635238] FAULT_INJECTION: forcing a failure. [ 2141.635238] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.638267] CPU: 1 PID: 23305 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2141.639918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.641660] Call Trace: [ 2141.642211] dump_stack+0x107/0x167 [ 2141.642967] should_fail.cold+0x5/0xa [ 2141.643764] ? create_object.isra.0+0x3a/0xa20 10:22:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:22:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:22:52 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 10:22:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:52 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:22:52 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:22:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2141.644714] should_failslab+0x5/0x20 [ 2141.647116] kmem_cache_alloc+0x5b/0x310 [ 2141.648034] ? mark_held_locks+0x9e/0xe0 [ 2141.648875] create_object.isra.0+0x3a/0xa20 [ 2141.649811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2141.650873] kmem_cache_alloc_bulk+0x168/0x320 [ 2141.651827] io_submit_sqes+0x6f76/0x85c0 [ 2141.652693] ? __do_sys_io_uring_enter+0x1f2/0x18c0 [ 2141.653747] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2141.654888] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2141.656014] ? io_submit_sqes+0x85c0/0x85c0 [ 2141.656974] ? recalibrate_cpu_khz+0x10/0x10 [ 2141.661941] ? ktime_get+0x158/0x1f0 [ 2141.662730] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2141.663738] ? clockevents_program_event+0x131/0x360 [ 2141.664949] ? tick_program_event+0xa8/0x140 [ 2141.666000] ? hrtimer_interrupt+0x771/0x9b0 [ 2141.667029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.668226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.669362] do_syscall_64+0x33/0x40 [ 2141.670165] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2141.671380] RIP: 0033:0x7f16bf6bfb19 [ 2141.672272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.676421] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2141.678102] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2141.679804] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2141.681501] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.683179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2141.684851] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 [ 2141.700284] FAULT_INJECTION: forcing a failure. [ 2141.700284] name failslab, interval 1, probability 0, space 0, times 0 [ 2141.702925] CPU: 1 PID: 23308 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2141.704508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2141.706492] Call Trace: [ 2141.707119] dump_stack+0x107/0x167 [ 2141.707905] should_fail.cold+0x5/0xa [ 2141.708729] ? percpu_ref_init+0xd8/0x3d0 [ 2141.709626] should_failslab+0x5/0x20 [ 2141.710442] kmem_cache_alloc_trace+0x55/0x320 [ 2141.711406] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2141.712393] percpu_ref_init+0xd8/0x3d0 [ 2141.713263] cgroup_mkdir+0x28b/0xf50 [ 2141.714166] ? cgroup_destroy_locked+0x710/0x710 [ 2141.715269] kernfs_iop_mkdir+0x14d/0x1e0 [ 2141.716383] vfs_mkdir+0x493/0x700 [ 2141.717180] do_mkdirat+0x150/0x2b0 [ 2141.717948] ? user_path_create+0xf0/0xf0 [ 2141.718828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2141.719934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2141.721033] do_syscall_64+0x33/0x40 [ 2141.721832] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2141.722934] RIP: 0033:0x7fe0a7580b19 [ 2141.723802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2141.728127] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2141.729857] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2141.731450] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2141.732970] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2141.734501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2141.736044] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:22:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2141.863839] FAT-fs (loop7): bogus number of reserved sectors [ 2141.865607] FAT-fs (loop7): Can't find a valid FAT filesystem 10:22:53 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:53 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:22:53 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:22:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2142.001735] FAULT_INJECTION: forcing a failure. [ 2142.001735] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.004670] CPU: 0 PID: 23432 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2142.006231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.008135] Call Trace: [ 2142.008760] dump_stack+0x107/0x167 [ 2142.009612] should_fail.cold+0x5/0xa [ 2142.010536] ? create_object.isra.0+0x3a/0xa20 [ 2142.011665] should_failslab+0x5/0x20 [ 2142.012574] kmem_cache_alloc+0x5b/0x310 [ 2142.013529] create_object.isra.0+0x3a/0xa20 [ 2142.014615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2142.015931] kmem_cache_alloc_trace+0x151/0x320 [ 2142.017107] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2142.018313] percpu_ref_init+0xd8/0x3d0 [ 2142.019333] cgroup_mkdir+0x28b/0xf50 [ 2142.020331] ? cgroup_destroy_locked+0x710/0x710 [ 2142.021568] kernfs_iop_mkdir+0x14d/0x1e0 [ 2142.022677] vfs_mkdir+0x493/0x700 [ 2142.023609] do_mkdirat+0x150/0x2b0 [ 2142.024556] ? user_path_create+0xf0/0xf0 [ 2142.025643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2142.026978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2142.028274] do_syscall_64+0x33/0x40 [ 2142.029231] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2142.030579] RIP: 0033:0x7fe0a7580b19 [ 2142.031524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.036330] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2142.038289] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2142.040141] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2142.042017] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.043812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2142.045615] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2142.065463] FAULT_INJECTION: forcing a failure. [ 2142.065463] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.067390] CPU: 1 PID: 23426 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2142.068127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.068924] Call Trace: [ 2142.069192] dump_stack+0x107/0x167 [ 2142.069578] should_fail.cold+0x5/0xa [ 2142.069991] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2142.070566] should_failslab+0x5/0x20 [ 2142.070971] kmem_cache_alloc_trace+0x55/0x320 [ 2142.071429] ? lock_acquire+0x197/0x470 [ 2142.072277] io_uring_alloc_task_context+0x99/0x6a0 [ 2142.073396] ? io_import_iovec+0x1120/0x1120 [ 2142.074336] ? find_held_lock+0x2c/0x110 [ 2142.075214] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2142.076248] __io_uring_add_tctx_node+0x2c6/0x520 [ 2142.077301] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2142.078506] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2142.079582] ? lock_downgrade+0x6d0/0x6d0 [ 2142.080491] ? find_held_lock+0x2c/0x110 [ 2142.081425] ? io_submit_sqes+0x85c0/0x85c0 [ 2142.082409] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2142.083456] ? wait_for_completion_io+0x270/0x270 [ 2142.084507] ? rcu_read_lock_any_held+0x75/0xa0 [ 2142.085551] ? vfs_write+0x354/0xa70 [ 2142.086344] ? fput_many+0x2f/0x1a0 [ 2142.087119] ? ksys_write+0x1a9/0x260 [ 2142.087920] ? __ia32_sys_read+0xb0/0xb0 [ 2142.088804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2142.089990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2142.091085] do_syscall_64+0x33/0x40 [ 2142.091892] entry_SYSCALL_64_after_hwframe+0x62/0xc7 10:22:53 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2142.092994] RIP: 0033:0x7f65fa146b19 [ 2142.097471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.103044] RSP: 002b:00007f65f7659188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2142.103735] RAX: ffffffffffffffda RBX: 00007f65fa25a1a0 RCX: 00007f65fa146b19 [ 2142.104387] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2142.105040] RBP: 00007f65f76591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.105752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2142.106475] R13: 00007ffc7d30470f R14: 00007f65f7659300 R15: 0000000000022000 10:22:53 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:07 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 10:23:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:23:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 10:23:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 1) [ 2155.981775] FAULT_INJECTION: forcing a failure. [ 2155.981775] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.982866] CPU: 1 PID: 23556 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2155.983418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2155.984069] Call Trace: [ 2155.984290] dump_stack+0x107/0x167 [ 2155.984582] should_fail.cold+0x5/0xa [ 2155.984890] ? create_object.isra.0+0x3a/0xa20 [ 2155.985258] should_failslab+0x5/0x20 [ 2155.985571] kmem_cache_alloc+0x5b/0x310 [ 2155.985910] ? mark_held_locks+0x9e/0xe0 [ 2155.986258] create_object.isra.0+0x3a/0xa20 [ 2155.986630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2155.987043] kmem_cache_alloc_bulk+0x168/0x320 [ 2155.987250] FAULT_INJECTION: forcing a failure. [ 2155.987250] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.987436] io_submit_sqes+0x6f76/0x85c0 [ 2155.988873] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2155.989297] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2155.989722] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2155.990123] ? lock_downgrade+0x6d0/0x6d0 [ 2155.990458] ? find_held_lock+0x2c/0x110 [ 2155.990788] ? io_submit_sqes+0x85c0/0x85c0 [ 2155.991163] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2155.991553] ? wait_for_completion_io+0x270/0x270 [ 2155.991943] ? rcu_read_lock_any_held+0x75/0xa0 [ 2155.992336] ? vfs_write+0x354/0xa70 [ 2155.992636] ? fput_many+0x2f/0x1a0 [ 2155.992933] ? ksys_write+0x1a9/0x260 [ 2155.993263] ? __ia32_sys_read+0xb0/0xb0 [ 2155.993618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2155.994046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2155.994472] do_syscall_64+0x33/0x40 [ 2155.994774] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2155.995205] RIP: 0033:0x7f16bf6bfb19 [ 2155.995503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2155.996989] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2155.997650] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2155.998242] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2155.998808] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2155.999392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2155.999960] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 [ 2156.000568] CPU: 0 PID: 23552 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2156.001263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.002076] Call Trace: [ 2156.002350] dump_stack+0x107/0x167 [ 2156.002708] should_fail.cold+0x5/0xa [ 2156.003089] ? create_object.isra.0+0x3a/0xa20 [ 2156.003541] should_failslab+0x5/0x20 [ 2156.003912] kmem_cache_alloc+0x5b/0x310 [ 2156.004315] create_object.isra.0+0x3a/0xa20 [ 2156.004748] kmemleak_alloc_percpu+0xa0/0x100 [ 2156.005190] pcpu_alloc+0x4e2/0x1240 [ 2156.005602] cgroup_rstat_init+0x14f/0x1f0 [ 2156.006116] cgroup_mkdir+0x709/0xf50 [ 2156.006568] ? cgroup_destroy_locked+0x710/0x710 [ 2156.007138] kernfs_iop_mkdir+0x14d/0x1e0 [ 2156.007633] vfs_mkdir+0x493/0x700 [ 2156.008061] do_mkdirat+0x150/0x2b0 [ 2156.008496] ? user_path_create+0xf0/0xf0 [ 2156.008986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.009623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.010219] do_syscall_64+0x33/0x40 [ 2156.010644] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2156.011229] RIP: 0033:0x7fe0a7580b19 [ 2156.011649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.013908] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2156.014759] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2156.015557] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2156.016342] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.017132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.017944] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2156.032412] FAULT_INJECTION: forcing a failure. [ 2156.032412] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.035279] CPU: 1 PID: 23566 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2156.036008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.036876] Call Trace: [ 2156.037174] dump_stack+0x107/0x167 [ 2156.037577] should_fail.cold+0x5/0xa [ 2156.038483] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2156.039689] should_failslab+0x5/0x20 [ 2156.040594] kmem_cache_alloc_trace+0x55/0x320 [ 2156.041735] ? lock_acquire+0x197/0x470 [ 2156.042675] io_uring_alloc_task_context+0x99/0x6a0 [ 2156.043961] ? io_import_iovec+0x1120/0x1120 [ 2156.045094] ? find_held_lock+0x2c/0x110 [ 2156.046103] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2156.047228] __io_uring_add_tctx_node+0x2c6/0x520 [ 2156.048347] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2156.049583] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2156.050726] ? lock_downgrade+0x6d0/0x6d0 [ 2156.051688] ? find_held_lock+0x2c/0x110 [ 2156.052639] ? io_submit_sqes+0x85c0/0x85c0 [ 2156.053656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2156.054778] ? wait_for_completion_io+0x270/0x270 [ 2156.055903] ? rcu_read_lock_any_held+0x75/0xa0 [ 2156.056975] ? vfs_write+0x354/0xa70 [ 2156.057874] ? fput_many+0x2f/0x1a0 [ 2156.058717] ? ksys_write+0x1a9/0x260 [ 2156.059601] ? __ia32_sys_read+0xb0/0xb0 [ 2156.060561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.061776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.062980] do_syscall_64+0x33/0x40 [ 2156.063824] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2156.064996] RIP: 0033:0x7fd62f372b19 [ 2156.065912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.070142] RSP: 002b:00007fd62c8c7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2156.071899] RAX: ffffffffffffffda RBX: 00007fd62f486020 RCX: 00007fd62f372b19 [ 2156.073549] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2156.075191] RBP: 00007fd62c8c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.076853] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2156.078523] R13: 00007fff4366632f R14: 00007fd62c8c7300 R15: 0000000000022000 [ 2156.084951] FAULT_INJECTION: forcing a failure. [ 2156.084951] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.087614] CPU: 1 PID: 23570 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2156.089199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.091111] Call Trace: [ 2156.091717] dump_stack+0x107/0x167 [ 2156.092550] should_fail.cold+0x5/0xa [ 2156.093418] ? create_object.isra.0+0x3a/0xa20 [ 2156.094502] should_failslab+0x5/0x20 [ 2156.095385] kmem_cache_alloc+0x5b/0x310 [ 2156.096305] create_object.isra.0+0x3a/0xa20 [ 2156.097302] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.098485] kmem_cache_alloc_trace+0x151/0x320 [ 2156.099553] io_uring_alloc_task_context+0x99/0x6a0 [ 2156.100703] ? io_import_iovec+0x1120/0x1120 [ 2156.101724] ? find_held_lock+0x2c/0x110 [ 2156.102641] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2156.103732] __io_uring_add_tctx_node+0x2c6/0x520 [ 2156.104823] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2156.106047] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2156.107154] ? lock_downgrade+0x6d0/0x6d0 [ 2156.108097] ? find_held_lock+0x2c/0x110 [ 2156.109026] ? io_submit_sqes+0x85c0/0x85c0 [ 2156.110021] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2156.111121] ? wait_for_completion_io+0x270/0x270 [ 2156.112222] ? rcu_read_lock_any_held+0x75/0xa0 [ 2156.113275] ? vfs_write+0x354/0xa70 [ 2156.114145] ? fput_many+0x2f/0x1a0 [ 2156.114970] ? ksys_write+0x1a9/0x260 [ 2156.115834] ? __ia32_sys_read+0xb0/0xb0 [ 2156.116845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.118207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.119532] do_syscall_64+0x33/0x40 [ 2156.120534] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2156.121953] RIP: 0033:0x7f65fa146b19 [ 2156.122920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.131494] RSP: 002b:00007f65f769b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2156.133249] RAX: ffffffffffffffda RBX: 00007f65fa25a020 RCX: 00007f65fa146b19 [ 2156.134895] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2156.137025] RBP: 00007f65f769b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.142263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2156.143104] R13: 00007ffc7d30470f R14: 00007f65f769b300 R15: 0000000000022000 [ 2156.194454] FAT-fs (loop7): bogus number of reserved sectors [ 2156.195878] FAT-fs (loop7): Can't find a valid FAT filesystem 10:23:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:07 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2156.427325] FAULT_INJECTION: forcing a failure. [ 2156.427325] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.428463] CPU: 1 PID: 23684 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2156.429054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.429754] Call Trace: [ 2156.429994] dump_stack+0x107/0x167 [ 2156.430320] should_fail.cold+0x5/0xa [ 2156.430669] ? create_object.isra.0+0x3a/0xa20 [ 2156.431111] should_failslab+0x5/0x20 [ 2156.431481] kmem_cache_alloc+0x5b/0x310 [ 2156.431878] ? mark_held_locks+0x9e/0xe0 [ 2156.432277] create_object.isra.0+0x3a/0xa20 [ 2156.432706] kmemleak_alloc_percpu+0xa0/0x100 [ 2156.433114] pcpu_alloc+0x4e2/0x1240 [ 2156.433476] cgroup_rstat_init+0x14f/0x1f0 [ 2156.433857] cgroup_mkdir+0x709/0xf50 [ 2156.434194] ? cgroup_destroy_locked+0x710/0x710 [ 2156.437652] kernfs_iop_mkdir+0x14d/0x1e0 [ 2156.437999] vfs_mkdir+0x493/0x700 [ 2156.438305] do_mkdirat+0x150/0x2b0 [ 2156.438610] ? user_path_create+0xf0/0xf0 [ 2156.438951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.439394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.439856] do_syscall_64+0x33/0x40 [ 2156.440184] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2156.440644] RIP: 0033:0x7fe0a7580b19 [ 2156.440991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.442630] RSP: 002b:00007fe0a4ad5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2156.443314] RAX: ffffffffffffffda RBX: 00007fe0a7694020 RCX: 00007fe0a7580b19 [ 2156.443950] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2156.444587] RBP: 00007fe0a4ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.445222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.445870] R13: 00007ffd16df67ef R14: 00007fe0a4ad5300 R15: 0000000000022000 [ 2156.522676] FAT-fs (loop7): bogus number of reserved sectors [ 2156.523742] FAT-fs (loop7): Can't find a valid FAT filesystem 10:23:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:07 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 2) [ 2156.663364] FAULT_INJECTION: forcing a failure. [ 2156.663364] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.664698] CPU: 0 PID: 23800 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2156.665315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.666057] Call Trace: [ 2156.666298] dump_stack+0x107/0x167 [ 2156.666623] should_fail.cold+0x5/0xa [ 2156.666969] should_failslab+0x5/0x20 [ 2156.667308] __kmalloc_track_caller+0x79/0x370 [ 2156.667723] ? kstrdup_const+0x53/0x80 [ 2156.668090] ? find_held_lock+0x2c/0x110 [ 2156.668481] kstrdup+0x36/0x70 [ 2156.668782] kstrdup_const+0x53/0x80 [ 2156.669120] __kernfs_new_node+0x9d/0x860 [ 2156.669501] ? mark_held_locks+0x9e/0xe0 [ 2156.669871] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2156.670324] ? cpumask_next+0x1f/0x30 [ 2156.670699] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2156.671169] ? pcpu_alloc+0x12a/0x1240 [ 2156.671562] kernfs_new_node+0x18d/0x250 [ 2156.671954] kernfs_create_dir_ns+0x49/0x160 [ 2156.672377] cgroup_mkdir+0x318/0xf50 [ 2156.672759] ? cgroup_destroy_locked+0x710/0x710 [ 2156.673219] kernfs_iop_mkdir+0x14d/0x1e0 [ 2156.673637] vfs_mkdir+0x493/0x700 [ 2156.673972] do_mkdirat+0x150/0x2b0 [ 2156.674301] ? user_path_create+0xf0/0xf0 [ 2156.674675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.675138] do_syscall_64+0x33/0x40 [ 2156.675474] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2156.675929] RIP: 0033:0x7fe0a7580b19 [ 2156.676270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.677985] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2156.678698] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2156.679366] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2156.680018] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.680644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.681281] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2156.703484] FAULT_INJECTION: forcing a failure. [ 2156.703484] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.705822] CPU: 1 PID: 23804 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2156.706973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.708368] Call Trace: [ 2156.708810] dump_stack+0x107/0x167 [ 2156.709422] should_fail.cold+0x5/0xa [ 2156.710239] ? create_object.isra.0+0x3a/0xa20 [ 2156.711025] should_failslab+0x5/0x20 [ 2156.711690] kmem_cache_alloc+0x5b/0x310 [ 2156.712395] create_object.isra.0+0x3a/0xa20 [ 2156.713157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.714158] kmem_cache_alloc_bulk+0x168/0x320 [ 2156.714910] io_submit_sqes+0x6f76/0x85c0 [ 2156.715595] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2156.716396] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2156.717217] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2156.718167] ? lock_downgrade+0x6d0/0x6d0 [ 2156.718868] ? find_held_lock+0x2c/0x110 [ 2156.719562] ? io_submit_sqes+0x85c0/0x85c0 [ 2156.720304] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2156.721123] ? wait_for_completion_io+0x270/0x270 [ 2156.722065] ? rcu_read_lock_any_held+0x75/0xa0 [ 2156.722833] ? vfs_write+0x354/0xa70 [ 2156.723442] ? fput_many+0x2f/0x1a0 [ 2156.724043] ? ksys_write+0x1a9/0x260 [ 2156.724667] ? __ia32_sys_read+0xb0/0xb0 [ 2156.725336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.725857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.726280] do_syscall_64+0x33/0x40 [ 2156.726582] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2156.727022] RIP: 0033:0x7fd62f372b19 [ 2156.727323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.728774] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2156.729379] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2156.730730] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2156.731931] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.733129] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2156.734557] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 [ 2156.923143] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2156.925281] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2156.926826] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2156.928062] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2156.929497] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 2171.251746] FAULT_INJECTION: forcing a failure. [ 2171.251746] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.254838] CPU: 0 PID: 23919 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2171.257556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.259537] Call Trace: [ 2171.260195] dump_stack+0x107/0x167 [ 2171.261894] should_fail.cold+0x5/0xa [ 2171.262338] ? create_object.isra.0+0x3a/0xa20 [ 2171.262842] should_failslab+0x5/0x20 [ 2171.263225] kmem_cache_alloc+0x5b/0x310 [ 2171.263645] create_object.isra.0+0x3a/0xa20 [ 2171.264099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2171.264628] __kmalloc_track_caller+0x177/0x370 [ 2171.265105] ? kstrdup_const+0x53/0x80 [ 2171.266862] ? find_held_lock+0x2c/0x110 [ 2171.267281] kstrdup+0x36/0x70 [ 2171.267631] kstrdup_const+0x53/0x80 [ 2171.268063] __kernfs_new_node+0x9d/0x860 [ 2171.268553] ? mark_held_locks+0x9e/0xe0 [ 2171.269012] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2171.269499] ? cpumask_next+0x1f/0x30 [ 2171.269905] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2171.270382] ? pcpu_alloc+0x12a/0x1240 [ 2171.270777] kernfs_new_node+0x18d/0x250 [ 2171.271193] kernfs_create_dir_ns+0x49/0x160 [ 2171.271630] cgroup_mkdir+0x318/0xf50 [ 2171.272019] ? cgroup_destroy_locked+0x710/0x710 [ 2171.272991] kernfs_iop_mkdir+0x14d/0x1e0 [ 2171.273904] vfs_mkdir+0x493/0x700 [ 2171.274686] do_mkdirat+0x150/0x2b0 [ 2171.275475] ? user_path_create+0xf0/0xf0 [ 2171.276375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.277512] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.278684] do_syscall_64+0x33/0x40 [ 2171.279496] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2171.280606] RIP: 0033:0x7fe0a7580b19 [ 2171.281409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.289678] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2171.291388] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2171.292933] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2171.294513] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.296085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2171.297607] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:23:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:23:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:23:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 3) 10:23:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 10:23:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 2171.317884] FAULT_INJECTION: forcing a failure. [ 2171.317884] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.320777] CPU: 0 PID: 23937 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2171.322315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.324127] Call Trace: [ 2171.324699] dump_stack+0x107/0x167 [ 2171.325492] should_fail.cold+0x5/0xa [ 2171.326404] ? create_object.isra.0+0x3a/0xa20 [ 2171.327498] should_failslab+0x5/0x20 [ 2171.328680] kmem_cache_alloc+0x5b/0x310 [ 2171.329682] create_object.isra.0+0x3a/0xa20 [ 2171.330710] kmemleak_alloc_percpu+0xa0/0x100 [ 2171.331737] pcpu_alloc+0x4e2/0x1240 [ 2171.332557] __percpu_counter_init+0x10d/0x2d0 [ 2171.333650] io_uring_alloc_task_context+0xcc/0x6a0 [ 2171.334811] ? io_import_iovec+0x1120/0x1120 [ 2171.335835] ? find_held_lock+0x2c/0x110 [ 2171.336793] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2171.337970] __io_uring_add_tctx_node+0x2c6/0x520 [ 2171.339131] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2171.340395] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2171.341570] ? lock_downgrade+0x6d0/0x6d0 [ 2171.342507] ? find_held_lock+0x2c/0x110 [ 2171.343395] ? io_submit_sqes+0x85c0/0x85c0 [ 2171.344327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2171.345376] ? wait_for_completion_io+0x270/0x270 [ 2171.346448] ? rcu_read_lock_any_held+0x75/0xa0 [ 2171.347463] ? vfs_write+0x354/0xa70 [ 2171.348274] ? fput_many+0x2f/0x1a0 [ 2171.349066] ? ksys_write+0x1a9/0x260 [ 2171.349906] ? __ia32_sys_read+0xb0/0xb0 [ 2171.350809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.352112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.353374] do_syscall_64+0x33/0x40 [ 2171.354279] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2171.355438] RIP: 0033:0x7fd62f372b19 [ 2171.356247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.360330] RSP: 002b:00007fd62c8c7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2171.362090] RAX: ffffffffffffffda RBX: 00007fd62f486020 RCX: 00007fd62f372b19 [ 2171.363730] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2171.365394] RBP: 00007fd62c8c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.367111] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2171.368829] R13: 00007fff4366632f R14: 00007fd62c8c7300 R15: 0000000000022000 [ 2171.482276] FAULT_INJECTION: forcing a failure. [ 2171.482276] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.483539] CPU: 1 PID: 23922 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2171.484251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.485121] Call Trace: [ 2171.485414] dump_stack+0x107/0x167 [ 2171.485811] should_fail.cold+0x5/0xa [ 2171.486221] ? create_object.isra.0+0x3a/0xa20 [ 2171.486704] should_failslab+0x5/0x20 [ 2171.487112] kmem_cache_alloc+0x5b/0x310 [ 2171.487549] ? mark_held_locks+0x9e/0xe0 [ 2171.487980] create_object.isra.0+0x3a/0xa20 [ 2171.488448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2171.488988] kmem_cache_alloc_bulk+0x168/0x320 [ 2171.489479] io_submit_sqes+0x6f76/0x85c0 [ 2171.489950] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2171.490537] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2171.491062] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2171.491574] ? io_submit_sqes+0x85c0/0x85c0 [ 2171.492038] ? recalibrate_cpu_khz+0x10/0x10 [ 2171.492494] ? ktime_get+0x158/0x1f0 [ 2171.492883] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2171.505114] FAT-fs (loop7): bogus number of reserved sectors [ 2171.506168] ? clockevents_program_event+0x131/0x360 [ 2171.506190] ? tick_program_event+0xa8/0x140 [ 2171.506206] ? hrtimer_interrupt+0x771/0x9b0 [ 2171.506236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.507523] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2171.508059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.508079] do_syscall_64+0x33/0x40 [ 2171.508095] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2171.508107] RIP: 0033:0x7f16bf6bfb19 [ 2171.508126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.514515] RSP: 002b:00007f16bcc35188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2171.515339] RAX: ffffffffffffffda RBX: 00007f16bf7d2f60 RCX: 00007f16bf6bfb19 [ 2171.516114] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2171.516879] RBP: 00007f16bcc351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.518774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2171.519419] R13: 00007ffed3678fef R14: 00007f16bcc35300 R15: 0000000000022000 10:23:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 4) 10:23:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2171.681921] FAULT_INJECTION: forcing a failure. [ 2171.681921] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.684606] CPU: 1 PID: 24031 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2171.685933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.687451] Call Trace: [ 2171.687937] dump_stack+0x107/0x167 [ 2171.688605] should_fail.cold+0x5/0xa [ 2171.689304] ? __kernfs_new_node+0xd4/0x860 [ 2171.689913] should_failslab+0x5/0x20 [ 2171.690259] kmem_cache_alloc+0x5b/0x310 [ 2171.690631] __kernfs_new_node+0xd4/0x860 [ 2171.691009] ? mark_held_locks+0x9e/0xe0 [ 2171.691378] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2171.691806] ? cpumask_next+0x1f/0x30 [ 2171.692151] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2171.692571] ? pcpu_alloc+0x12a/0x1240 [ 2171.692931] kernfs_new_node+0x18d/0x250 [ 2171.693306] kernfs_create_dir_ns+0x49/0x160 [ 2171.693751] cgroup_mkdir+0x318/0xf50 [ 2171.694626] ? cgroup_destroy_locked+0x710/0x710 [ 2171.695499] kernfs_iop_mkdir+0x14d/0x1e0 [ 2171.695973] FAT-fs (loop7): bogus number of reserved sectors [ 2171.696249] vfs_mkdir+0x493/0x700 [ 2171.696269] do_mkdirat+0x150/0x2b0 [ 2171.696287] ? user_path_create+0xf0/0xf0 [ 2171.697050] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2171.697595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.697610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.697640] do_syscall_64+0x33/0x40 [ 2171.702034] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2171.702500] RIP: 0033:0x7fe0a7580b19 [ 2171.702844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.704479] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2171.705160] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2171.706033] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2171.707304] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.708569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2171.709800] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:23:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2171.723669] FAULT_INJECTION: forcing a failure. [ 2171.723669] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.725175] CPU: 0 PID: 24029 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2171.725941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.726670] Call Trace: [ 2171.726910] dump_stack+0x107/0x167 [ 2171.727244] should_fail.cold+0x5/0xa [ 2171.727623] ? create_object.isra.0+0x3a/0xa20 [ 2171.728035] should_failslab+0x5/0x20 [ 2171.728371] kmem_cache_alloc+0x5b/0x310 [ 2171.728734] ? mark_held_locks+0x9e/0xe0 [ 2171.729093] create_object.isra.0+0x3a/0xa20 [ 2171.729489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2171.729976] kmem_cache_alloc_bulk+0x168/0x320 [ 2171.730419] io_submit_sqes+0x6f76/0x85c0 [ 2171.730786] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2171.731230] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2171.731666] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2171.732094] ? lock_downgrade+0x6d0/0x6d0 [ 2171.732491] ? find_held_lock+0x2c/0x110 [ 2171.732860] ? io_submit_sqes+0x85c0/0x85c0 [ 2171.733245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2171.733685] ? wait_for_completion_io+0x270/0x270 [ 2171.734133] ? rcu_read_lock_any_held+0x75/0xa0 [ 2171.734541] ? vfs_write+0x354/0xa70 [ 2171.734898] ? fput_many+0x2f/0x1a0 [ 2171.735230] ? ksys_write+0x1a9/0x260 [ 2171.735579] ? __ia32_sys_read+0xb0/0xb0 [ 2171.735953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.736428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.736892] do_syscall_64+0x33/0x40 [ 2171.737251] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2171.737739] RIP: 0033:0x7fd62f372b19 [ 2171.738084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.739729] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2171.740418] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2171.741049] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2171.741704] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.742382] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2171.743030] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 10:23:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:23 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:23 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2171.872845] FAULT_INJECTION: forcing a failure. [ 2171.872845] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.874223] CPU: 0 PID: 24059 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2171.874834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2171.875591] Call Trace: [ 2171.875829] dump_stack+0x107/0x167 [ 2171.876148] should_fail.cold+0x5/0xa [ 2171.876483] ? create_object.isra.0+0x3a/0xa20 [ 2171.876900] should_failslab+0x5/0x20 [ 2171.877254] kmem_cache_alloc+0x5b/0x310 [ 2171.877615] create_object.isra.0+0x3a/0xa20 [ 2171.878042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2171.878490] kmem_cache_alloc+0x159/0x310 [ 2171.878870] __kernfs_new_node+0xd4/0x860 [ 2171.879235] ? mark_held_locks+0x9e/0xe0 [ 2171.879611] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2171.880056] ? cpumask_next+0x1f/0x30 [ 2171.880392] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2171.880804] ? pcpu_alloc+0x12a/0x1240 [ 2171.881165] kernfs_new_node+0x18d/0x250 [ 2171.881528] kernfs_create_dir_ns+0x49/0x160 [ 2171.881950] cgroup_mkdir+0x318/0xf50 [ 2171.882289] ? cgroup_destroy_locked+0x710/0x710 [ 2171.882704] kernfs_iop_mkdir+0x14d/0x1e0 [ 2171.883070] vfs_mkdir+0x493/0x700 [ 2171.883390] do_mkdirat+0x150/0x2b0 [ 2171.883723] ? user_path_create+0xf0/0xf0 [ 2171.884107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2171.884567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2171.885032] do_syscall_64+0x33/0x40 [ 2171.885384] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2171.885875] RIP: 0033:0x7fe0a7580b19 [ 2171.886211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2171.887803] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2171.888505] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2171.889161] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2171.889817] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2171.890431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2171.891058] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2171.962371] FAT-fs (loop7): bogus number of reserved sectors [ 2171.963266] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2171.996838] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2171.997865] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2171.998490] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2171.999077] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2171.999720] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 2185.793853] FAULT_INJECTION: forcing a failure. [ 2185.793853] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.794874] CPU: 1 PID: 24082 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2185.795428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2185.796091] Call Trace: [ 2185.796314] dump_stack+0x107/0x167 [ 2185.796612] should_fail.cold+0x5/0xa [ 2185.796927] ? selinux_kernfs_init_security+0x137/0x4c0 [ 2185.797364] should_failslab+0x5/0x20 [ 2185.797676] __kmalloc+0x72/0x390 [ 2185.797982] selinux_kernfs_init_security+0x137/0x4c0 [ 2185.798403] ? selinux_file_mprotect+0x610/0x610 [ 2185.798791] ? find_held_lock+0x2c/0x110 [ 2185.799126] ? __kernfs_new_node+0x2ad/0x860 [ 2185.799485] ? lock_downgrade+0x6d0/0x6d0 [ 2185.799826] ? rwlock_bug.part.0+0x90/0x90 [ 2185.800177] security_kernfs_init_security+0x4e/0xb0 [ 2185.800589] __kernfs_new_node+0x531/0x860 [ 2185.800937] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2185.801323] ? cpumask_next+0x1f/0x30 [ 2185.801633] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2185.802028] ? pcpu_alloc+0x12a/0x1240 [ 2185.802353] kernfs_new_node+0x18d/0x250 [ 2185.802690] kernfs_create_dir_ns+0x49/0x160 [ 2185.803050] cgroup_mkdir+0x318/0xf50 [ 2185.803367] ? cgroup_destroy_locked+0x710/0x710 [ 2185.803752] kernfs_iop_mkdir+0x14d/0x1e0 [ 2185.804089] vfs_mkdir+0x493/0x700 [ 2185.804388] do_mkdirat+0x150/0x2b0 [ 2185.804687] ? user_path_create+0xf0/0xf0 [ 2185.805026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2185.805449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2185.805881] do_syscall_64+0x33/0x40 [ 2185.806188] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2185.806599] RIP: 0033:0x7fe0a7580b19 [ 2185.806902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2185.808362] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2185.808975] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2185.809547] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2185.810134] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.810706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2185.811281] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:23:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 5) 10:23:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:23:36 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:23:36 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:36 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:36 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:36 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:36 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDi']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:23:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2185.907118] FAT-fs (loop7): Unrecognized mount option "roDi" or missing value [ 2185.962121] FAULT_INJECTION: forcing a failure. [ 2185.962121] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.963414] CPU: 1 PID: 24105 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2185.964030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2185.964765] Call Trace: [ 2185.965016] dump_stack+0x107/0x167 [ 2185.965363] should_fail.cold+0x5/0xa [ 2185.965719] ? create_object.isra.0+0x3a/0xa20 [ 2185.970214] ? create_object.isra.0+0x3a/0xa20 [ 2185.970637] should_failslab+0x5/0x20 [ 2185.970988] kmem_cache_alloc+0x5b/0x310 [ 2185.971367] create_object.isra.0+0x3a/0xa20 [ 2185.971776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2185.972246] kmem_cache_alloc_bulk+0x168/0x320 [ 2185.972684] io_submit_sqes+0x6f76/0x85c0 [ 2185.973072] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2185.973530] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2185.974005] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2185.974458] ? lock_downgrade+0x6d0/0x6d0 [ 2185.974847] ? find_held_lock+0x2c/0x110 [ 2185.975229] ? io_submit_sqes+0x85c0/0x85c0 [ 2185.975633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2185.976078] ? wait_for_completion_io+0x270/0x270 [ 2185.976520] ? rcu_read_lock_any_held+0x75/0xa0 [ 2185.976944] ? vfs_write+0x354/0xa70 [ 2185.977291] ? fput_many+0x2f/0x1a0 [ 2185.977633] ? ksys_write+0x1a9/0x260 [ 2185.978001] ? __ia32_sys_read+0xb0/0xb0 [ 2185.978378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2185.978862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2185.979342] do_syscall_64+0x33/0x40 [ 2185.979692] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2185.980160] RIP: 0033:0x7fd62f372b19 [ 2185.980510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2185.982156] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2185.982847] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2185.983506] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2185.984158] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.984806] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2185.985455] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 [ 2185.987339] FAULT_INJECTION: forcing a failure. [ 2185.987339] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.988916] CPU: 0 PID: 24121 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2185.989600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2185.990416] Call Trace: [ 2185.990691] dump_stack+0x107/0x167 10:23:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDi']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2185.991068] should_fail.cold+0x5/0xa [ 2185.991473] ? create_object.isra.0+0x3a/0xa20 [ 2185.991938] should_failslab+0x5/0x20 [ 2185.992316] kmem_cache_alloc+0x5b/0x310 [ 2185.992714] ? stack_trace_consume_entry+0x160/0x160 [ 2185.997910] create_object.isra.0+0x3a/0xa20 [ 2185.998363] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2185.998882] kmem_cache_alloc+0x159/0x310 [ 2185.999314] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2185.999885] radix_tree_extend+0x231/0x490 [ 2186.000320] idr_get_free+0x623/0x8f0 [ 2186.000725] idr_alloc_u32+0x170/0x2d0 [ 2186.001130] ? __fprop_inc_percpu_max+0x130/0x130 [ 2186.001616] ? lock_acquire+0x197/0x470 [ 2186.002039] ? __kernfs_new_node+0xff/0x860 [ 2186.002480] idr_alloc_cyclic+0x102/0x230 [ 2186.002897] ? idr_alloc+0x130/0x130 [ 2186.003270] ? rwlock_bug.part.0+0x90/0x90 [ 2186.003711] __kernfs_new_node+0x117/0x860 [ 2186.004145] ? mark_held_locks+0x9e/0xe0 [ 2186.004564] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2186.005042] ? cpumask_next+0x1f/0x30 [ 2186.005429] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2186.005923] ? pcpu_alloc+0x12a/0x1240 [ 2186.006331] kernfs_new_node+0x18d/0x250 [ 2186.006751] kernfs_create_dir_ns+0x49/0x160 [ 2186.007204] cgroup_mkdir+0x318/0xf50 [ 2186.007601] ? cgroup_destroy_locked+0x710/0x710 [ 2186.008083] kernfs_iop_mkdir+0x14d/0x1e0 [ 2186.008508] vfs_mkdir+0x493/0x700 [ 2186.008876] do_mkdirat+0x150/0x2b0 [ 2186.009249] ? user_path_create+0xf0/0xf0 [ 2186.009676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.010220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.010741] do_syscall_64+0x33/0x40 [ 2186.011120] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2186.011629] RIP: 0033:0x7fe0a7580b19 [ 2186.012011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.013819] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2186.014588] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2186.015292] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2186.016001] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2186.016703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:23:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2186.017413] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:23:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 2186.122754] FAT-fs (loop7): Unrecognized mount option "roDi" or missing value 10:23:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2186.346804] FAULT_INJECTION: forcing a failure. [ 2186.346804] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.348333] CPU: 0 PID: 24232 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2186.349025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2186.349840] Call Trace: [ 2186.350121] dump_stack+0x107/0x167 [ 2186.350494] should_fail.cold+0x5/0xa [ 2186.350887] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2186.351472] should_failslab+0x5/0x20 [ 2186.351862] kmem_cache_alloc+0x5b/0x310 [ 2186.352282] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2186.352854] idr_get_free+0x4b5/0x8f0 [ 2186.353254] idr_alloc_u32+0x170/0x2d0 [ 2186.353658] ? __fprop_inc_percpu_max+0x130/0x130 [ 2186.354165] ? lock_acquire+0x197/0x470 [ 2186.354571] ? __kernfs_new_node+0xff/0x860 [ 2186.355018] idr_alloc_cyclic+0x102/0x230 [ 2186.355442] ? idr_alloc+0x130/0x130 [ 2186.355821] ? rwlock_bug.part.0+0x90/0x90 [ 2186.356261] __kernfs_new_node+0x117/0x860 [ 2186.356692] ? mark_held_locks+0x9e/0xe0 [ 2186.357110] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2186.357585] ? cpumask_next+0x1f/0x30 [ 2186.357998] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2186.358472] ? pcpu_alloc+0x12a/0x1240 [ 2186.358879] kernfs_new_node+0x18d/0x250 [ 2186.359300] kernfs_create_dir_ns+0x49/0x160 [ 2186.359749] cgroup_mkdir+0x318/0xf50 [ 2186.360140] ? cgroup_destroy_locked+0x710/0x710 [ 2186.360620] kernfs_iop_mkdir+0x14d/0x1e0 [ 2186.361033] vfs_mkdir+0x493/0x700 [ 2186.361401] do_mkdirat+0x150/0x2b0 [ 2186.361769] ? user_path_create+0xf0/0xf0 [ 2186.362212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2186.362744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2186.363268] do_syscall_64+0x33/0x40 [ 2186.363652] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2186.364163] RIP: 0033:0x7fe0a7580b19 [ 2186.364542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2186.366369] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2186.367135] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2186.367841] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2186.368544] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2186.369256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2186.369987] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2186.438488] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2186.439487] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2186.440192] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2186.440833] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2186.441590] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:23:52 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDi']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:23:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 10:23:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:23:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 6) 10:23:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:52 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 10:23:52 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2201.232239] FAULT_INJECTION: forcing a failure. [ 2201.232239] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.233317] CPU: 1 PID: 24348 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2201.233882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.234669] Call Trace: [ 2201.234913] dump_stack+0x107/0x167 [ 2201.235292] should_fail.cold+0x5/0xa [ 2201.235650] ? create_object.isra.0+0x3a/0xa20 [ 2201.236124] should_failslab+0x5/0x20 [ 2201.236462] kmem_cache_alloc+0x5b/0x310 [ 2201.236801] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 2201.237309] create_object.isra.0+0x3a/0xa20 [ 2201.237693] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2201.238214] __kmalloc+0x16e/0x390 [ 2201.238526] io_wq_create+0xeb/0xc00 [ 2201.238833] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2201.239285] ? io_import_iovec+0x1120/0x1120 [ 2201.239665] ? io_apoll_task_func+0x2d0/0x2d0 [ 2201.240109] ? __io_req_find_next+0x300/0x300 [ 2201.240503] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2201.240934] __io_uring_add_tctx_node+0x2c6/0x520 [ 2201.241402] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2201.241863] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2201.242348] ? lock_downgrade+0x6d0/0x6d0 [ 2201.242681] ? find_held_lock+0x2c/0x110 [ 2201.243018] ? io_submit_sqes+0x85c0/0x85c0 [ 2201.243419] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2201.243825] ? wait_for_completion_io+0x270/0x270 [ 2201.244306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2201.244709] ? vfs_write+0x354/0xa70 [ 2201.245072] ? fput_many+0x2f/0x1a0 [ 2201.245439] ? ksys_write+0x1a9/0x260 [ 2201.246016] ? __ia32_sys_read+0xb0/0xb0 [ 2201.246736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.247782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.248475] do_syscall_64+0x33/0x40 [ 2201.249012] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.249528] RIP: 0033:0x7fd62f372b19 [ 2201.249864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.251556] RSP: 002b:00007fd62c8c7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2201.252280] RAX: ffffffffffffffda RBX: 00007fd62f486020 RCX: 00007fd62f372b19 [ 2201.252902] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2201.253589] RBP: 00007fd62c8c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.254269] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2201.254898] R13: 00007fff4366632f R14: 00007fd62c8c7300 R15: 0000000000022000 [ 2201.315484] FAULT_INJECTION: forcing a failure. [ 2201.315484] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.316804] CPU: 1 PID: 24347 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2201.317410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.318167] Call Trace: [ 2201.318390] dump_stack+0x107/0x167 [ 2201.318683] should_fail.cold+0x5/0xa [ 2201.318996] ? create_object.isra.0+0x3a/0xa20 [ 2201.319436] should_failslab+0x5/0x20 [ 2201.319745] kmem_cache_alloc+0x5b/0x310 [ 2201.320121] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2201.320521] create_object.isra.0+0x3a/0xa20 [ 2201.320902] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2201.321407] __kmalloc+0x16e/0x390 10:23:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 2201.321738] selinux_kernfs_init_security+0x137/0x4c0 [ 2201.322249] ? selinux_file_mprotect+0x610/0x610 [ 2201.323941] ? find_held_lock+0x2c/0x110 [ 2201.324368] ? __kernfs_new_node+0x2ad/0x860 [ 2201.324765] ? lock_downgrade+0x6d0/0x6d0 [ 2201.325194] ? rwlock_bug.part.0+0x90/0x90 [ 2201.325584] security_kernfs_init_security+0x4e/0xb0 [ 2201.326163] __kernfs_new_node+0x531/0x860 [ 2201.326553] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2201.326985] ? cpumask_next+0x1f/0x30 [ 2201.327409] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2201.327833] ? pcpu_alloc+0x12a/0x1240 [ 2201.328250] kernfs_new_node+0x18d/0x250 [ 2201.328629] kernfs_create_dir_ns+0x49/0x160 [ 2201.329030] cgroup_mkdir+0x318/0xf50 [ 2201.329439] ? cgroup_destroy_locked+0x710/0x710 [ 2201.329878] kernfs_iop_mkdir+0x14d/0x1e0 [ 2201.330316] vfs_mkdir+0x493/0x700 [ 2201.330647] do_mkdirat+0x150/0x2b0 [ 2201.330978] ? user_path_create+0xf0/0xf0 [ 2201.331433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.331919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.332449] do_syscall_64+0x33/0x40 [ 2201.332790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.333302] RIP: 0033:0x7fe0a7580b19 [ 2201.333648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.335422] RSP: 002b:00007fe0a4ad5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2201.336162] RAX: ffffffffffffffda RBX: 00007fe0a7694020 RCX: 00007fe0a7580b19 [ 2201.336787] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2201.337471] RBP: 00007fe0a4ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.338161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.338792] R13: 00007ffd16df67ef R14: 00007fe0a4ad5300 R15: 0000000000022000 [ 2201.357839] FAT-fs (loop7): Unrecognized mount option "roDi" or missing value 10:23:52 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:23:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:23:52 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:23:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2201.596648] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:23:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 7) 10:23:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:23:52 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2201.778736] FAULT_INJECTION: forcing a failure. [ 2201.778736] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.780045] CPU: 0 PID: 24526 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2201.780739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.781562] Call Trace: [ 2201.781847] dump_stack+0x107/0x167 [ 2201.782463] should_fail.cold+0x5/0xa [ 2201.782858] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2201.783432] should_failslab+0x5/0x20 [ 2201.783814] kmem_cache_alloc+0x5b/0x310 [ 2201.784227] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2201.784782] idr_get_free+0x4b5/0x8f0 [ 2201.785175] idr_alloc_u32+0x170/0x2d0 [ 2201.785575] ? __fprop_inc_percpu_max+0x130/0x130 [ 2201.786090] ? lock_acquire+0x197/0x470 [ 2201.786495] ? __kernfs_new_node+0xff/0x860 [ 2201.786933] idr_alloc_cyclic+0x102/0x230 [ 2201.787352] ? idr_alloc+0x130/0x130 [ 2201.787726] ? rwlock_bug.part.0+0x90/0x90 [ 2201.788161] __kernfs_new_node+0x117/0x860 [ 2201.788552] ? mark_held_locks+0x9e/0xe0 [ 2201.788964] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2201.789415] ? cpumask_next+0x1f/0x30 [ 2201.789803] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2201.790293] ? pcpu_alloc+0x12a/0x1240 [ 2201.790693] kernfs_new_node+0x18d/0x250 [ 2201.791109] kernfs_create_dir_ns+0x49/0x160 [ 2201.791559] cgroup_mkdir+0x318/0xf50 [ 2201.791950] ? cgroup_destroy_locked+0x710/0x710 [ 2201.792417] kernfs_iop_mkdir+0x14d/0x1e0 [ 2201.792834] vfs_mkdir+0x493/0x700 [ 2201.793182] do_mkdirat+0x150/0x2b0 [ 2201.793556] ? user_path_create+0xf0/0xf0 [ 2201.793943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.794486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.795008] do_syscall_64+0x33/0x40 [ 2201.795387] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.795895] RIP: 0033:0x7fe0a7580b19 [ 2201.796273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.798090] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2201.798840] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2201.799542] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2201.800236] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.800944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.801644] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2201.813674] FAULT_INJECTION: forcing a failure. [ 2201.813674] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.819267] CPU: 0 PID: 24520 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2201.826701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.827534] Call Trace: [ 2201.827820] dump_stack+0x107/0x167 [ 2201.828201] should_fail.cold+0x5/0xa [ 2201.828600] ? create_object.isra.0+0x3a/0xa20 [ 2201.829064] should_failslab+0x5/0x20 [ 2201.829452] kmem_cache_alloc+0x5b/0x310 [ 2201.829865] ? mark_held_locks+0x9e/0xe0 [ 2201.830301] create_object.isra.0+0x3a/0xa20 [ 2201.830748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2201.831268] kmem_cache_alloc_bulk+0x168/0x320 [ 2201.831740] io_submit_sqes+0x6f76/0x85c0 [ 2201.832156] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2201.832656] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2201.833159] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2201.833645] ? lock_downgrade+0x6d0/0x6d0 [ 2201.834080] ? find_held_lock+0x2c/0x110 [ 2201.834495] ? io_submit_sqes+0x85c0/0x85c0 [ 2201.834942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2201.835433] ? wait_for_completion_io+0x270/0x270 [ 2201.835922] ? rcu_read_lock_any_held+0x75/0xa0 [ 2201.836393] ? vfs_write+0x354/0xa70 [ 2201.836770] ? fput_many+0x2f/0x1a0 [ 2201.837146] ? ksys_write+0x1a9/0x260 [ 2201.837533] ? __ia32_sys_read+0xb0/0xb0 [ 2201.837945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.838476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.838997] do_syscall_64+0x33/0x40 [ 2201.839371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.839879] RIP: 0033:0x7fd62f372b19 [ 2201.840251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.842049] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2201.842813] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2201.843515] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2201.844220] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.844927] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2201.845628] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 [ 2201.946151] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2202.172695] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2202.173834] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2202.175285] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2202.176666] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2202.178268] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:24:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 8) 10:24:07 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:24:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) 10:24:07 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:24:07 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 10:24:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 10:24:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2216.126337] FAULT_INJECTION: forcing a failure. [ 2216.126337] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.129005] CPU: 1 PID: 24597 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2216.130756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.132711] Call Trace: [ 2216.133323] dump_stack+0x107/0x167 [ 2216.134160] should_fail.cold+0x5/0xa [ 2216.135100] ? create_object.isra.0+0x3a/0xa20 [ 2216.136145] should_failslab+0x5/0x20 [ 2216.137019] kmem_cache_alloc+0x5b/0x310 [ 2216.137961] ? mark_held_locks+0x9e/0xe0 [ 2216.138903] create_object.isra.0+0x3a/0xa20 [ 2216.139981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2216.141146] kmem_cache_alloc+0x159/0x310 [ 2216.142116] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2216.143411] idr_get_free+0x4b5/0x8f0 [ 2216.144326] idr_alloc_u32+0x170/0x2d0 [ 2216.145272] ? __fprop_inc_percpu_max+0x130/0x130 [ 2216.146392] ? lock_acquire+0x197/0x470 [ 2216.147314] ? __kernfs_new_node+0xff/0x860 [ 2216.148304] idr_alloc_cyclic+0x102/0x230 [ 2216.149278] ? idr_alloc+0x130/0x130 [ 2216.150194] ? rwlock_bug.part.0+0x90/0x90 [ 2216.151270] __kernfs_new_node+0x117/0x860 [ 2216.152313] ? mark_held_locks+0x9e/0xe0 [ 2216.153266] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2216.154385] ? cpumask_next+0x1f/0x30 [ 2216.155360] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2216.156556] ? pcpu_alloc+0x12a/0x1240 [ 2216.157547] kernfs_new_node+0x18d/0x250 [ 2216.158611] kernfs_create_dir_ns+0x49/0x160 [ 2216.159645] cgroup_mkdir+0x318/0xf50 [ 2216.160523] ? cgroup_destroy_locked+0x710/0x710 [ 2216.161615] kernfs_iop_mkdir+0x14d/0x1e0 [ 2216.162646] vfs_mkdir+0x493/0x700 [ 2216.163488] do_mkdirat+0x150/0x2b0 [ 2216.164325] ? user_path_create+0xf0/0xf0 [ 2216.165279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2216.166494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2216.167700] do_syscall_64+0x33/0x40 [ 2216.168559] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2216.169732] RIP: 0033:0x7fe0a7580b19 [ 2216.170603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.174884] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2216.176611] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2216.178244] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2216.179867] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.181536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2216.183181] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2216.260221] FAULT_INJECTION: forcing a failure. [ 2216.260221] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.261594] CPU: 0 PID: 24603 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2216.262853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.265074] Call Trace: [ 2216.265781] dump_stack+0x107/0x167 [ 2216.267224] should_fail.cold+0x5/0xa [ 2216.268260] ? create_object.isra.0+0x3a/0xa20 [ 2216.269489] should_failslab+0x5/0x20 [ 2216.270521] kmem_cache_alloc+0x5b/0x310 [ 2216.272094] ? io_wq_create+0x114/0xc00 [ 2216.273167] create_object.isra.0+0x3a/0xa20 [ 2216.274391] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2216.275761] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2216.277063] io_wq_create+0x6ef/0xc00 [ 2216.278056] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2216.279371] ? io_import_iovec+0x1120/0x1120 [ 2216.280519] ? io_apoll_task_func+0x2d0/0x2d0 [ 2216.281671] ? __io_req_find_next+0x300/0x300 [ 2216.282833] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2216.284075] __io_uring_add_tctx_node+0x2c6/0x520 [ 2216.285311] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2216.286685] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2216.287954] ? lock_downgrade+0x6d0/0x6d0 [ 2216.289016] ? find_held_lock+0x2c/0x110 [ 2216.290061] ? io_submit_sqes+0x85c0/0x85c0 [ 2216.291180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2216.292403] ? wait_for_completion_io+0x270/0x270 [ 2216.293630] ? rcu_read_lock_any_held+0x75/0xa0 [ 2216.294826] ? vfs_write+0x354/0xa70 [ 2216.295778] ? fput_many+0x2f/0x1a0 [ 2216.296720] ? ksys_write+0x1a9/0x260 [ 2216.297698] ? __ia32_sys_read+0xb0/0xb0 [ 2216.298751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2216.300077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2216.300140] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2216.301395] do_syscall_64+0x33/0x40 [ 2216.301418] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2216.304760] RIP: 0033:0x7fd62f372b19 [ 2216.305720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.310484] RSP: 002b:00007fd62c8c7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2216.312437] RAX: ffffffffffffffda RBX: 00007fd62f486020 RCX: 00007fd62f372b19 [ 2216.314304] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2216.316138] RBP: 00007fd62c8c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.317961] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2216.319808] R13: 00007fff4366632f R14: 00007fd62c8c7300 R15: 0000000000022000 10:24:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2216.440933] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:24:07 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:07 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:24:07 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2216.582742] FAULT_INJECTION: forcing a failure. [ 2216.582742] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.583889] CPU: 0 PID: 24717 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2216.584499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.585235] Call Trace: [ 2216.585492] dump_stack+0x107/0x167 [ 2216.585821] should_fail.cold+0x5/0xa [ 2216.586184] ? selinux_kernfs_init_security+0x137/0x4c0 [ 2216.586684] should_failslab+0x5/0x20 [ 2216.587034] __kmalloc+0x72/0x390 [ 2216.587352] selinux_kernfs_init_security+0x137/0x4c0 [ 2216.587810] ? selinux_file_mprotect+0x610/0x610 [ 2216.588231] ? find_held_lock+0x2c/0x110 [ 2216.588602] ? __kernfs_new_node+0x2ad/0x860 [ 2216.588996] ? lock_downgrade+0x6d0/0x6d0 [ 2216.589374] ? rwlock_bug.part.0+0x90/0x90 [ 2216.589760] security_kernfs_init_security+0x4e/0xb0 [ 2216.590277] __kernfs_new_node+0x531/0x860 [ 2216.590705] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2216.591163] ? cpumask_next+0x1f/0x30 [ 2216.591505] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2216.591929] ? pcpu_alloc+0x12a/0x1240 [ 2216.592285] kernfs_new_node+0x18d/0x250 [ 2216.592656] kernfs_create_dir_ns+0x49/0x160 [ 2216.593050] cgroup_mkdir+0x318/0xf50 [ 2216.593391] ? cgroup_destroy_locked+0x710/0x710 [ 2216.593814] kernfs_iop_mkdir+0x14d/0x1e0 [ 2216.594213] vfs_mkdir+0x493/0x700 [ 2216.594541] do_mkdirat+0x150/0x2b0 [ 2216.594864] ? user_path_create+0xf0/0xf0 [ 2216.595232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2216.595690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2216.596159] do_syscall_64+0x33/0x40 [ 2216.596487] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2216.596940] RIP: 0033:0x7fe0a7580b19 [ 2216.597271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.598902] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2216.599574] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2216.600196] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2216.600819] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.601442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2216.602068] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:24:07 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:24:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 9) [ 2216.745219] FAT-fs (loop3): Unrecognized mount option "roDir" or missing value [ 2216.786750] FAULT_INJECTION: forcing a failure. [ 2216.786750] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.788172] CPU: 0 PID: 24827 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2216.788770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.789495] Call Trace: [ 2216.789735] dump_stack+0x107/0x167 [ 2216.790062] should_fail.cold+0x5/0xa [ 2216.790449] ? create_object.isra.0+0x3a/0xa20 [ 2216.790854] should_failslab+0x5/0x20 [ 2216.791190] kmem_cache_alloc+0x5b/0x310 [ 2216.791550] ? mark_held_locks+0x9e/0xe0 [ 2216.791913] create_object.isra.0+0x3a/0xa20 [ 2216.792300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2216.792749] kmem_cache_alloc_bulk+0x168/0x320 [ 2216.793154] io_submit_sqes+0x6f76/0x85c0 [ 2216.793519] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2216.793957] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2216.794437] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2216.794874] ? lock_downgrade+0x6d0/0x6d0 [ 2216.795241] ? find_held_lock+0x2c/0x110 [ 2216.795606] ? io_submit_sqes+0x85c0/0x85c0 [ 2216.796006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2216.796437] ? wait_for_completion_io+0x270/0x270 [ 2216.796868] ? rcu_read_lock_any_held+0x75/0xa0 [ 2216.797284] ? vfs_write+0x354/0xa70 [ 2216.797616] ? fput_many+0x2f/0x1a0 [ 2216.797940] ? ksys_write+0x1a9/0x260 [ 2216.798347] ? __ia32_sys_read+0xb0/0xb0 [ 2216.798759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2216.799292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2216.799817] do_syscall_64+0x33/0x40 [ 2216.800196] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2216.800708] RIP: 0033:0x7fd62f372b19 [ 2216.801083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.802750] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2216.803415] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2216.804039] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2216.804662] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.805289] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2216.805918] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 [ 2217.024198] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2217.025541] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2217.026180] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2217.026755] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2217.027488] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:24:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 10:24:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 10) 10:24:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:24:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:24:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 1) 10:24:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) [ 2231.021685] FAULT_INJECTION: forcing a failure. [ 2231.021685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2231.022861] CPU: 1 PID: 24842 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2231.023484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.024235] Call Trace: [ 2231.024485] dump_stack+0x107/0x167 [ 2231.024825] should_fail.cold+0x5/0xa [ 2231.025186] _copy_from_user+0x2e/0x1b0 [ 2231.025557] iovec_from_user+0x141/0x400 [ 2231.025936] __import_iovec+0x67/0x590 [ 2231.026302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.026816] io_import_iovec+0x581/0x1120 [ 2231.027208] ? io_complete_rw+0x230/0x230 [ 2231.027589] ? lock_downgrade+0x6d0/0x6d0 [ 2231.031677] ? unwind_next_frame+0x13ef/0x1a90 [ 2231.032048] io_read+0xe14/0x11e0 [ 2231.032335] ? kiocb_done+0xc90/0xc90 [ 2231.032647] ? lock_chain_count+0x20/0x20 [ 2231.033001] ? lock_chain_count+0x20/0x20 [ 2231.033364] ? stack_trace_save+0x8c/0xc0 [ 2231.033696] ? stack_trace_consume_entry+0x160/0x160 [ 2231.034106] ? lock_acquire+0x197/0x470 [ 2231.034448] ? __lock_acquire+0xbb1/0x5b00 [ 2231.034793] io_issue_sqe+0x2e8a/0x7700 [ 2231.035118] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.035534] ? lock_chain_count+0x20/0x20 [ 2231.035865] ? __is_insn_slot_addr+0x14c/0x290 [ 2231.036230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.036645] ? io_connect+0x610/0x610 [ 2231.036952] ? lock_acquire+0x197/0x470 [ 2231.037271] ? find_held_lock+0x2c/0x110 [ 2231.037601] ? __fget_files+0x26d/0x4c0 [ 2231.037917] ? lock_downgrade+0x6d0/0x6d0 [ 2231.038285] __io_queue_sqe+0x90/0x9d0 [ 2231.038644] ? io_issue_sqe+0x7700/0x7700 [ 2231.038977] ? __io_file_supports_nowait+0x2c4/0x510 [ 2231.039381] ? io_prep_rw+0x7f5/0x1050 [ 2231.039694] io_submit_sqes+0x4461/0x85c0 [ 2231.040047] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.040447] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.040831] ? lock_downgrade+0x6d0/0x6d0 [ 2231.041159] ? find_held_lock+0x2c/0x110 [ 2231.041485] ? io_submit_sqes+0x85c0/0x85c0 [ 2231.041844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.042231] ? wait_for_completion_io+0x270/0x270 [ 2231.042640] ? rcu_read_lock_any_held+0x75/0xa0 [ 2231.043015] ? vfs_write+0x354/0xa70 [ 2231.043313] ? fput_many+0x2f/0x1a0 [ 2231.043629] ? ksys_write+0x1a9/0x260 [ 2231.043941] ? __ia32_sys_read+0xb0/0xb0 [ 2231.044270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.044686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.045100] do_syscall_64+0x33/0x40 [ 2231.045399] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.045808] RIP: 0033:0x7fd62f372b19 [ 2231.046110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.047567] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.048182] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2231.048743] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2231.049358] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.049924] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2231.050507] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 10:24:22 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2231.105202] FAULT_INJECTION: forcing a failure. [ 2231.105202] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.106584] CPU: 1 PID: 24854 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2231.107178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.107851] Call Trace: [ 2231.108072] dump_stack+0x107/0x167 [ 2231.108368] should_fail.cold+0x5/0xa [ 2231.108679] ? create_object.isra.0+0x3a/0xa20 [ 2231.109050] should_failslab+0x5/0x20 [ 2231.109358] kmem_cache_alloc+0x5b/0x310 [ 2231.109689] create_object.isra.0+0x3a/0xa20 [ 2231.110043] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2231.110477] kmem_cache_alloc+0x159/0x310 [ 2231.110821] __es_insert_extent+0xed1/0x1370 [ 2231.111184] ext4_es_insert_extent+0x45d/0xf10 [ 2231.111560] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2231.111931] ? lock_downgrade+0x6d0/0x6d0 [ 2231.112301] ? down_write_killable+0x180/0x180 [ 2231.112678] ext4_map_blocks+0x80b/0x1910 [ 2231.113025] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2231.113386] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 2231.113770] ext4_getblk+0x144/0x680 [ 2231.114076] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 2231.114493] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2231.114863] ? __brelse+0x84/0xa0 [ 2231.115143] ? __ext4_new_inode+0x148/0x5370 [ 2231.115501] ext4_bread+0x29/0x1f0 [ 2231.115789] ext4_append+0x228/0x4e0 [ 2231.116095] ? ext4_move_extents+0x3050/0x3050 [ 2231.116467] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2231.116901] ext4_init_new_dir+0x25e/0x4d0 [ 2231.117253] ? ext4_init_dot_dotdot+0x610/0x610 [ 2231.117636] ext4_mkdir+0x3c1/0xb10 [ 2231.117939] ? ext4_rmdir+0xf70/0xf70 [ 2231.118254] vfs_mkdir+0x493/0x700 [ 2231.118561] do_mkdirat+0x150/0x2b0 [ 2231.118857] ? user_path_create+0xf0/0xf0 [ 2231.119194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.119612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.120030] do_syscall_64+0x33/0x40 [ 2231.120330] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.120740] RIP: 0033:0x7fe0a7580b19 [ 2231.121045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.122563] RSP: 002b:00007fe0a4ad5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2231.123172] RAX: ffffffffffffffda RBX: 00007fe0a7694020 RCX: 00007fe0a7580b19 [ 2231.123738] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000004 [ 2231.124312] RBP: 00007fe0a4ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.124881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2231.125446] R13: 00007ffd16df67ef R14: 00007fe0a4ad5300 R15: 0000000000022000 10:24:22 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 2231.304205] FAULT_INJECTION: forcing a failure. [ 2231.304205] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.305269] CPU: 1 PID: 24849 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2231.305885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.306652] Call Trace: [ 2231.306910] dump_stack+0x107/0x167 [ 2231.307258] should_fail.cold+0x5/0xa [ 2231.307616] should_failslab+0x5/0x20 [ 2231.307965] kmem_cache_alloc_bulk+0x4b/0x320 [ 2231.308391] io_submit_sqes+0x6f76/0x85c0 [ 2231.308774] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2231.309241] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.309699] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.309925] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2231.310757] ? lock_downgrade+0x6d0/0x6d0 [ 2231.310772] ? find_held_lock+0x2c/0x110 [ 2231.311525] ? io_submit_sqes+0x85c0/0x85c0 [ 2231.311924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.312374] ? wait_for_completion_io+0x270/0x270 [ 2231.312807] ? rcu_read_lock_any_held+0x75/0xa0 [ 2231.313232] ? vfs_write+0x354/0xa70 [ 2231.313572] ? fput_many+0x2f/0x1a0 [ 2231.313905] ? ksys_write+0x1a9/0x260 [ 2231.314247] ? __ia32_sys_read+0xb0/0xb0 [ 2231.314631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.315105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.315587] do_syscall_64+0x33/0x40 [ 2231.315931] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.316397] RIP: 0033:0x7f64d3107b19 [ 2231.316740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.318359] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.319053] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2231.319692] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2231.320347] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.320991] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2231.321636] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 [ 2231.332851] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2231.334083] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2231.334772] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2231.335445] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2231.336201] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:24:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xea, 0x0, 0x0, 0x0) 10:24:22 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, 0x0, 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2231.474485] FAULT_INJECTION: forcing a failure. [ 2231.474485] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.475632] CPU: 0 PID: 24984 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2231.476313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.477154] Call Trace: [ 2231.477424] dump_stack+0x107/0x167 [ 2231.477797] should_fail.cold+0x5/0xa [ 2231.478186] should_failslab+0x5/0x20 [ 2231.478589] __kmalloc_track_caller+0x79/0x370 [ 2231.479048] ? security_context_to_sid_core+0xb4/0x890 [ 2231.479580] kmemdup_nul+0x2d/0xa0 [ 2231.479947] security_context_to_sid_core+0xb4/0x890 [ 2231.480477] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2231.481040] ? do_raw_spin_lock+0x121/0x260 [ 2231.481472] ? rwlock_bug.part.0+0x90/0x90 [ 2231.481889] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.482394] ? do_raw_spin_unlock+0x4f/0x220 [ 2231.482846] ? _raw_spin_unlock+0x1a/0x30 [ 2231.483268] security_context_to_sid+0x35/0x50 [ 2231.483735] selinux_kernfs_init_security+0x19d/0x4c0 [ 2231.484252] ? selinux_file_mprotect+0x610/0x610 [ 2231.484737] ? find_held_lock+0x2c/0x110 [ 2231.485162] ? __kernfs_new_node+0x2ad/0x860 [ 2231.485612] ? lock_downgrade+0x6d0/0x6d0 [ 2231.486030] ? rwlock_bug.part.0+0x90/0x90 [ 2231.486503] security_kernfs_init_security+0x4e/0xb0 [ 2231.487027] __kernfs_new_node+0x531/0x860 [ 2231.487461] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2231.487939] ? cpumask_next+0x1f/0x30 [ 2231.488324] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2231.488803] ? pcpu_alloc+0x12a/0x1240 [ 2231.489211] kernfs_new_node+0x18d/0x250 [ 2231.489630] kernfs_create_dir_ns+0x49/0x160 [ 2231.490082] cgroup_mkdir+0x318/0xf50 [ 2231.490506] ? cgroup_destroy_locked+0x710/0x710 [ 2231.490983] kernfs_iop_mkdir+0x14d/0x1e0 [ 2231.491407] vfs_mkdir+0x493/0x700 [ 2231.491777] do_mkdirat+0x150/0x2b0 [ 2231.492151] ? user_path_create+0xf0/0xf0 [ 2231.492583] do_syscall_64+0x33/0x40 [ 2231.492959] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.493469] RIP: 0033:0x7fe0a7580b19 [ 2231.493846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.495695] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2231.496470] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2231.497194] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2231.497925] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.498679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2231.499389] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:24:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 11) 10:24:22 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 2) [ 2231.603280] FAULT_INJECTION: forcing a failure. [ 2231.603280] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2231.606237] CPU: 0 PID: 25040 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2231.607941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.609619] Call Trace: [ 2231.610159] dump_stack+0x107/0x167 [ 2231.611054] should_fail.cold+0x5/0xa [ 2231.611831] __alloc_pages_nodemask+0x182/0x600 [ 2231.612771] ? xa_load+0x12d/0x2c0 [ 2231.613497] ? lock_downgrade+0x6d0/0x6d0 [ 2231.614389] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2231.615880] alloc_pages_current+0x187/0x280 [ 2231.616778] __page_cache_alloc+0x2d2/0x360 [ 2231.617666] page_cache_ra_unbounded+0x207/0x6f0 [ 2231.618710] ? read_pages+0xbc0/0xbc0 [ 2231.619474] ? __lock_page_or_retry+0x4e0/0x4e0 [ 2231.620430] ondemand_readahead+0x8e5/0x1150 [ 2231.621334] page_cache_sync_ra+0x138/0x170 [ 2231.622200] generic_file_buffered_read+0xc8e/0x2920 [ 2231.623454] ? pagecache_get_page+0xc80/0xc80 [ 2231.624368] ? _cond_resched+0x12/0x80 [ 2231.625152] ? inode_security+0x107/0x140 [ 2231.625995] generic_file_read_iter+0x33f/0x490 [ 2231.627083] ? security_file_permission+0x24e/0x570 [ 2231.628106] blkdev_read_iter+0x127/0x1c0 [ 2231.628944] ? blkdev_write_iter+0x550/0x550 [ 2231.629841] io_read+0x2dc/0x11e0 [ 2231.630618] ? kiocb_done+0xc90/0xc90 [ 2231.631411] ? stack_trace_consume_entry+0x160/0x160 [ 2231.632451] ? lock_acquire+0x197/0x470 [ 2231.633258] ? __lock_acquire+0xbb1/0x5b00 [ 2231.634130] io_issue_sqe+0x2e8a/0x7700 [ 2231.635079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.636142] ? lock_chain_count+0x20/0x20 [ 2231.636982] ? __is_insn_slot_addr+0x14c/0x290 [ 2231.637908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.639130] ? io_connect+0x610/0x610 [ 2231.639903] ? lock_acquire+0x197/0x470 [ 2231.640717] ? find_held_lock+0x2c/0x110 [ 2231.641554] ? __fget_files+0x26d/0x4c0 [ 2231.642363] ? lock_downgrade+0x6d0/0x6d0 [ 2231.642828] __io_queue_sqe+0x90/0x9d0 [ 2231.643223] ? io_issue_sqe+0x7700/0x7700 [ 2231.643641] ? __io_file_supports_nowait+0x2c4/0x510 [ 2231.644147] ? io_prep_rw+0x7f5/0x1050 [ 2231.644541] io_submit_sqes+0x4461/0x85c0 [ 2231.644968] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.645463] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.645942] ? lock_downgrade+0x6d0/0x6d0 [ 2231.646369] ? find_held_lock+0x2c/0x110 [ 2231.647430] ? io_submit_sqes+0x85c0/0x85c0 [ 2231.648298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.649246] ? wait_for_completion_io+0x270/0x270 [ 2231.650218] ? rcu_read_lock_any_held+0x75/0xa0 [ 2231.651394] ? vfs_write+0x354/0xa70 [ 2231.652173] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2231.653109] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2231.654164] ? ksys_write+0x1a9/0x260 [ 2231.655072] ? __ia32_sys_read+0xb0/0xb0 [ 2231.655919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.657010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.658071] do_syscall_64+0x33/0x40 [ 2231.658950] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.660002] RIP: 0033:0x7fd62f372b19 [ 2231.660765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.665038] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.666469] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2231.667168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2231.667869] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.668570] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2231.669278] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 [ 2231.690702] FAULT_INJECTION: forcing a failure. [ 2231.690702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2231.692121] CPU: 1 PID: 25065 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2231.692278] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2231.692699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.692707] Call Trace: [ 2231.694370] dump_stack+0x107/0x167 [ 2231.694709] should_fail.cold+0x5/0xa [ 2231.695070] __alloc_pages_nodemask+0x182/0x600 [ 2231.695503] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2231.696067] alloc_pages_current+0x187/0x280 [ 2231.696477] allocate_slab+0x26f/0x380 [ 2231.696844] ___slab_alloc+0x470/0x700 [ 2231.697214] ? io_submit_sqes+0x6f76/0x85c0 [ 2231.697628] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2231.698062] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2231.698500] io_submit_sqes+0x6f76/0x85c0 [ 2231.698890] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2231.699352] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.699808] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2231.700262] ? lock_downgrade+0x6d0/0x6d0 [ 2231.700643] ? find_held_lock+0x2c/0x110 [ 2231.701022] ? io_submit_sqes+0x85c0/0x85c0 [ 2231.701428] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.701874] ? wait_for_completion_io+0x270/0x270 [ 2231.702320] ? rcu_read_lock_any_held+0x75/0xa0 [ 2231.703370] ? vfs_write+0x354/0xa70 [ 2231.704082] ? fput_many+0x2f/0x1a0 [ 2231.704776] ? ksys_write+0x1a9/0x260 [ 2231.705503] ? __ia32_sys_read+0xb0/0xb0 [ 2231.706280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.707534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.708548] do_syscall_64+0x33/0x40 [ 2231.709279] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.710281] RIP: 0033:0x7f64d3107b19 [ 2231.711175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.714800] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.716287] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2231.717672] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2231.719243] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.720589] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2231.721942] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 [ 2231.739502] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2231.741988] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2231.743555] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2231.744836] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2231.746440] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 2231.748824] Buffer I/O error on dev sr0, logical block 0, async page read [ 2231.750156] Buffer I/O error on dev sr0, logical block 1, async page read [ 2231.751861] Buffer I/O error on dev sr0, logical block 2, async page read [ 2231.753298] Buffer I/O error on dev sr0, logical block 3, async page read [ 2231.754781] Buffer I/O error on dev sr0, logical block 4, async page read [ 2231.756145] Buffer I/O error on dev sr0, logical block 5, async page read [ 2231.757480] Buffer I/O error on dev sr0, logical block 6, async page read [ 2231.758962] Buffer I/O error on dev sr0, logical block 7, async page read 10:24:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 12) [ 2231.918550] FAULT_INJECTION: forcing a failure. [ 2231.918550] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.919993] CPU: 1 PID: 25090 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2231.920819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.921802] Call Trace: [ 2231.922128] dump_stack+0x107/0x167 [ 2231.922574] should_fail.cold+0x5/0xa [ 2231.923046] ? create_object.isra.0+0x3a/0xa20 [ 2231.923400] perf: interrupt took too long (20255 > 19215), lowering kernel.perf_event_max_sample_rate to 9000 [ 2231.923547] should_failslab+0x5/0x20 [ 2231.923565] kmem_cache_alloc+0x5b/0x310 [ 2231.926227] create_object.isra.0+0x3a/0xa20 [ 2231.926781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2231.927333] __kmalloc_track_caller+0x177/0x370 [ 2231.927832] ? security_context_to_sid_core+0xb4/0x890 [ 2231.928410] kmemdup_nul+0x2d/0xa0 [ 2231.928799] security_context_to_sid_core+0xb4/0x890 [ 2231.929356] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2231.929943] ? do_raw_spin_lock+0x121/0x260 [ 2231.930420] ? rwlock_bug.part.0+0x90/0x90 [ 2231.930883] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.931418] ? do_raw_spin_unlock+0x4f/0x220 [ 2231.931899] ? _raw_spin_unlock+0x1a/0x30 [ 2231.932359] security_context_to_sid+0x35/0x50 [ 2231.932862] selinux_kernfs_init_security+0x19d/0x4c0 [ 2231.933421] ? selinux_file_mprotect+0x610/0x610 [ 2231.933934] ? find_held_lock+0x2c/0x110 [ 2231.934392] ? __kernfs_new_node+0x2ad/0x860 [ 2231.934801] ? lock_downgrade+0x6d0/0x6d0 [ 2231.935175] ? rwlock_bug.part.0+0x90/0x90 [ 2231.935556] security_kernfs_init_security+0x4e/0xb0 [ 2231.936017] __kernfs_new_node+0x531/0x860 [ 2231.936414] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2231.936851] ? cpumask_next+0x1f/0x30 [ 2231.937102] FAULT_INJECTION: forcing a failure. [ 2231.937102] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.937197] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2231.937212] ? pcpu_alloc+0x12a/0x1240 [ 2231.937235] kernfs_new_node+0x18d/0x250 [ 2231.937255] kernfs_create_dir_ns+0x49/0x160 [ 2231.940273] cgroup_mkdir+0x318/0xf50 [ 2231.940697] ? cgroup_destroy_locked+0x710/0x710 [ 2231.941212] kernfs_iop_mkdir+0x14d/0x1e0 [ 2231.941664] vfs_mkdir+0x493/0x700 [ 2231.942057] do_mkdirat+0x150/0x2b0 [ 2231.942454] ? user_path_create+0xf0/0xf0 [ 2231.942814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.943271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.943720] do_syscall_64+0x33/0x40 [ 2231.944048] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.944486] RIP: 0033:0x7fe0a7580b19 [ 2231.944805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.946367] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2231.947154] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2231.947925] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2231.948695] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.949467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2231.950231] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2231.951024] CPU: 0 PID: 25093 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2231.952419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2231.954080] Call Trace: [ 2231.954692] dump_stack+0x107/0x167 [ 2231.955402] should_fail.cold+0x5/0xa [ 2231.956157] ? create_object.isra.0+0x3a/0xa20 [ 2231.957064] should_failslab+0x5/0x20 [ 2231.957827] kmem_cache_alloc+0x5b/0x310 [ 2231.958549] create_object.isra.0+0x3a/0xa20 [ 2231.958983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2231.959498] kmem_cache_alloc+0x159/0x310 [ 2231.959931] xas_alloc+0x336/0x440 [ 2231.960296] xas_create+0x34a/0x10d0 [ 2231.960678] ? kernel_text_address+0xf2/0x120 [ 2231.961131] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2231.961661] xas_store+0x8c/0x1c40 [ 2231.962034] __xa_store+0x164/0x2d0 [ 2231.962485] ? xa_delete_node+0x280/0x280 [ 2231.963338] xa_store+0x31/0x50 [ 2231.963996] __io_uring_add_tctx_node+0x1cf/0x520 [ 2231.964957] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2231.966032] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2231.966721] ? lock_downgrade+0x6d0/0x6d0 [ 2231.967135] ? find_held_lock+0x2c/0x110 [ 2231.967547] ? io_submit_sqes+0x85c0/0x85c0 [ 2231.967987] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2231.968476] ? wait_for_completion_io+0x270/0x270 [ 2231.968961] ? rcu_read_lock_any_held+0x75/0xa0 [ 2231.969422] ? vfs_write+0x354/0xa70 [ 2231.969797] ? fput_many+0x2f/0x1a0 [ 2231.970168] ? ksys_write+0x1a9/0x260 [ 2231.970902] ? __ia32_sys_read+0xb0/0xb0 [ 2231.971695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2231.972750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2231.973792] do_syscall_64+0x33/0x40 [ 2231.974548] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2231.975577] RIP: 0033:0x7fd62f372b19 [ 2231.976346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2231.980501] RSP: 002b:00007fd62c8c7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2231.982036] RAX: ffffffffffffffda RBX: 00007fd62f486020 RCX: 00007fd62f372b19 [ 2231.983766] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2231.985252] RBP: 00007fd62c8c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.986564] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2231.987278] R13: 00007fff4366632f R14: 00007fd62c8c7300 R15: 0000000000022000 10:24:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 3) 10:24:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:24:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, 0x0, 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:24:37 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 28) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 13) 10:24:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 10:24:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 10:24:37 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2246.604146] FAULT_INJECTION: forcing a failure. [ 2246.604146] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.605170] CPU: 0 PID: 25104 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2246.605763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.606492] Call Trace: [ 2246.606750] dump_stack+0x107/0x167 [ 2246.607082] should_fail.cold+0x5/0xa [ 2246.607421] ? create_object.isra.0+0x3a/0xa20 [ 2246.607823] should_failslab+0x5/0x20 [ 2246.608161] kmem_cache_alloc+0x5b/0x310 [ 2246.608518] ? mark_held_locks+0x9e/0xe0 [ 2246.608881] create_object.isra.0+0x3a/0xa20 [ 2246.609267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.609712] kmem_cache_alloc_bulk+0x168/0x320 [ 2246.610118] io_submit_sqes+0x6f76/0x85c0 [ 2246.610483] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2246.610934] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.611379] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.611804] ? lock_downgrade+0x6d0/0x6d0 [ 2246.612176] ? find_held_lock+0x2c/0x110 [ 2246.612535] ? io_submit_sqes+0x85c0/0x85c0 [ 2246.612923] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.613350] ? wait_for_completion_io+0x270/0x270 [ 2246.613778] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.614186] ? vfs_write+0x354/0xa70 [ 2246.614522] ? fput_many+0x2f/0x1a0 [ 2246.614858] ? ksys_write+0x1a9/0x260 [ 2246.615200] ? __ia32_sys_read+0xb0/0xb0 [ 2246.615560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.616024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.616481] do_syscall_64+0x33/0x40 [ 2246.616808] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.617267] RIP: 0033:0x7f64d3107b19 [ 2246.617597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.619229] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.619891] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2246.620510] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2246.621128] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 10:24:37 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 2246.621744] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2246.622924] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 10:24:37 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeaff, 0x0, 0x0, 0x0) [ 2246.660334] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2246.671199] FAULT_INJECTION: forcing a failure. [ 2246.671199] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.672670] CPU: 0 PID: 25223 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2246.673278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.674037] Call Trace: [ 2246.674285] dump_stack+0x107/0x167 [ 2246.674672] should_fail.cold+0x5/0xa [ 2246.675015] should_failslab+0x5/0x20 [ 2246.675351] __kmalloc_track_caller+0x79/0x370 [ 2246.675826] ? sidtab_sid2str_get+0x17e/0x720 [ 2246.676228] kmemdup+0x23/0x50 [ 2246.676562] sidtab_sid2str_get+0x17e/0x720 [ 2246.676944] sidtab_entry_to_string+0x33/0x110 [ 2246.677345] security_sid_to_context_core+0x33c/0x5d0 [ 2246.677851] selinux_kernfs_init_security+0x239/0x4c0 [ 2246.678302] ? selinux_file_mprotect+0x610/0x610 [ 2246.678781] ? find_held_lock+0x2c/0x110 [ 2246.679144] ? __kernfs_new_node+0x2ad/0x860 [ 2246.679612] ? rwlock_bug.part.0+0x90/0x90 [ 2246.679987] security_kernfs_init_security+0x4e/0xb0 [ 2246.682528] __kernfs_new_node+0x531/0x860 [ 2246.682910] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2246.683326] ? cpumask_next+0x1f/0x30 [ 2246.683740] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2246.684147] ? pcpu_alloc+0x12a/0x1240 [ 2246.684548] kernfs_new_node+0x18d/0x250 [ 2246.684908] kernfs_create_dir_ns+0x49/0x160 [ 2246.685300] cgroup_mkdir+0x318/0xf50 [ 2246.685690] ? cgroup_destroy_locked+0x710/0x710 [ 2246.686106] kernfs_iop_mkdir+0x14d/0x1e0 [ 2246.686528] vfs_mkdir+0x493/0x700 [ 2246.686853] do_mkdirat+0x150/0x2b0 [ 2246.687171] ? user_path_create+0xf0/0xf0 [ 2246.687612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.688069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.688586] do_syscall_64+0x33/0x40 [ 2246.688929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.689373] RIP: 0033:0x7fe0a7580b19 [ 2246.689745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.691379] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2246.692114] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2246.692779] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2246.693395] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.694060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.694756] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2246.713648] FAULT_INJECTION: forcing a failure. [ 2246.713648] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.714873] CPU: 1 PID: 25234 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2246.715485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.716168] Call Trace: [ 2246.716410] dump_stack+0x107/0x167 [ 2246.716716] should_fail.cold+0x5/0xa [ 2246.717043] ? xas_alloc+0x336/0x440 [ 2246.717381] should_failslab+0x5/0x20 [ 2246.717723] kmem_cache_alloc+0x5b/0x310 [ 2246.718091] xas_alloc+0x336/0x440 [ 2246.718422] xas_create+0x34a/0x10d0 [ 2246.718780] ? kernel_text_address+0xf2/0x120 [ 2246.719188] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2246.719645] xas_store+0x8c/0x1c40 [ 2246.719975] __xa_store+0x164/0x2d0 [ 2246.720309] ? xa_delete_node+0x280/0x280 [ 2246.720683] ? trace_hardirqs_on+0x5b/0x180 [ 2246.721036] xa_store+0x31/0x50 [ 2246.721309] __io_uring_add_tctx_node+0x1cf/0x520 [ 2246.721709] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2246.722149] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2246.722590] ? lock_downgrade+0x6d0/0x6d0 [ 2246.722942] ? find_held_lock+0x2c/0x110 [ 2246.723282] ? io_submit_sqes+0x85c0/0x85c0 [ 2246.723636] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.724057] ? wait_for_completion_io+0x270/0x270 [ 2246.724469] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.724848] ? vfs_write+0x354/0xa70 [ 2246.725157] ? fput_many+0x2f/0x1a0 [ 2246.725469] ? ksys_write+0x1a9/0x260 [ 2246.725795] ? __ia32_sys_read+0xb0/0xb0 [ 2246.726139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.726577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.727033] do_syscall_64+0x33/0x40 [ 2246.727349] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.727790] RIP: 0033:0x7fd62f372b19 [ 2246.728134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.729700] RSP: 002b:00007fd62c8c7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.730358] RAX: ffffffffffffffda RBX: 00007fd62f486020 RCX: 00007fd62f372b19 [ 2246.730994] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2246.731582] RBP: 00007fd62c8c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.732183] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2246.732765] R13: 00007fff4366632f R14: 00007fd62c8c7300 R15: 0000000000022000 10:24:37 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, 0x0, 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:24:37 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 4) 10:24:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2246.851144] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2246.889370] FAULT_INJECTION: forcing a failure. [ 2246.889370] name failslab, interval 1, probability 0, space 0, times 0 10:24:38 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 29) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2246.890397] CPU: 1 PID: 25316 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2246.891101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.891812] Call Trace: [ 2246.892050] dump_stack+0x107/0x167 [ 2246.892375] should_fail.cold+0x5/0xa [ 2246.892716] ? create_object.isra.0+0x3a/0xa20 [ 2246.893126] should_failslab+0x5/0x20 [ 2246.893458] kmem_cache_alloc+0x5b/0x310 [ 2246.893828] ? mark_held_locks+0x9e/0xe0 [ 2246.894191] create_object.isra.0+0x3a/0xa20 [ 2246.894598] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.895055] kmem_cache_alloc_bulk+0x168/0x320 [ 2246.895468] io_submit_sqes+0x6f76/0x85c0 [ 2246.895847] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2246.896301] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.896741] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.897167] ? lock_downgrade+0x6d0/0x6d0 [ 2246.897535] ? find_held_lock+0x2c/0x110 [ 2246.897894] ? io_submit_sqes+0x85c0/0x85c0 [ 2246.898296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.898740] ? wait_for_completion_io+0x270/0x270 [ 2246.899392] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.899803] ? vfs_write+0x354/0xa70 [ 2246.900141] ? fput_many+0x2f/0x1a0 [ 2246.900477] ? ksys_write+0x1a9/0x260 [ 2246.900812] ? __ia32_sys_read+0xb0/0xb0 [ 2246.901187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.901666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.902126] do_syscall_64+0x33/0x40 [ 2246.902460] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.902922] RIP: 0033:0x7f64d3107b19 [ 2246.903259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.904870] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.905546] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2246.906184] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2246.906836] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.907465] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2246.908097] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 10:24:38 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000), 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2246.956377] FAULT_INJECTION: forcing a failure. [ 2246.956377] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.957536] CPU: 1 PID: 25346 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2246.958265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.958980] Call Trace: [ 2246.959221] dump_stack+0x107/0x167 [ 2246.959540] should_fail.cold+0x5/0xa [ 2246.959881] ? create_object.isra.0+0x3a/0xa20 [ 2246.960292] should_failslab+0x5/0x20 [ 2246.960636] kmem_cache_alloc+0x5b/0x310 [ 2246.961001] ? sidtab_sid2str_get+0x65/0x720 [ 2246.961393] create_object.isra.0+0x3a/0xa20 [ 2246.961784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.962230] __kmalloc_track_caller+0x177/0x370 [ 2246.962659] ? sidtab_sid2str_get+0x17e/0x720 [ 2246.963063] kmemdup+0x23/0x50 [ 2246.963351] sidtab_sid2str_get+0x17e/0x720 [ 2246.963742] sidtab_entry_to_string+0x33/0x110 [ 2246.964144] security_sid_to_context_core+0x33c/0x5d0 [ 2246.964605] selinux_kernfs_init_security+0x239/0x4c0 [ 2246.965070] ? selinux_file_mprotect+0x610/0x610 [ 2246.965488] ? find_held_lock+0x2c/0x110 [ 2246.965859] ? __kernfs_new_node+0x2ad/0x860 [ 2246.966257] ? rwlock_bug.part.0+0x90/0x90 [ 2246.966658] security_kernfs_init_security+0x4e/0xb0 [ 2246.967129] __kernfs_new_node+0x531/0x860 [ 2246.967510] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2246.967936] ? cpumask_next+0x1f/0x30 [ 2246.968291] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2246.968704] ? pcpu_alloc+0x12a/0x1240 [ 2246.969076] kernfs_new_node+0x18d/0x250 [ 2246.969444] kernfs_create_dir_ns+0x49/0x160 [ 2246.969839] cgroup_mkdir+0x318/0xf50 10:24:38 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 5) [ 2246.970197] ? cgroup_destroy_locked+0x710/0x710 [ 2246.970632] kernfs_iop_mkdir+0x14d/0x1e0 [ 2246.971005] vfs_mkdir+0x493/0x700 [ 2246.971324] do_mkdirat+0x150/0x2b0 [ 2246.971653] ? user_path_create+0xf0/0xf0 [ 2246.972268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.972735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.973193] do_syscall_64+0x33/0x40 [ 2246.973521] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.973976] RIP: 0033:0x7fe0a7580b19 [ 2246.974307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.975972] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2246.976637] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2246.977268] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2246.977901] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.978554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.979174] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:24:38 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:24:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 14) [ 2247.048765] FAULT_INJECTION: forcing a failure. [ 2247.048765] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.049841] CPU: 0 PID: 25353 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2247.050437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.051155] Call Trace: [ 2247.051391] dump_stack+0x107/0x167 [ 2247.051710] should_fail.cold+0x5/0xa [ 2247.052056] ? create_object.isra.0+0x3a/0xa20 [ 2247.052452] should_failslab+0x5/0x20 [ 2247.052784] kmem_cache_alloc+0x5b/0x310 [ 2247.053136] ? mark_held_locks+0x9e/0xe0 [ 2247.053501] create_object.isra.0+0x3a/0xa20 [ 2247.053884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2247.054333] kmem_cache_alloc_bulk+0x168/0x320 [ 2247.054743] io_submit_sqes+0x6f76/0x85c0 [ 2247.055110] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2247.055542] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2247.055980] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2247.056410] ? lock_downgrade+0x6d0/0x6d0 [ 2247.056767] ? find_held_lock+0x2c/0x110 [ 2247.057131] ? io_submit_sqes+0x85c0/0x85c0 [ 2247.057516] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2247.057938] ? wait_for_completion_io+0x270/0x270 [ 2247.058364] ? rcu_read_lock_any_held+0x75/0xa0 [ 2247.058784] ? vfs_write+0x354/0xa70 [ 2247.059113] ? fput_many+0x2f/0x1a0 [ 2247.059436] ? ksys_write+0x1a9/0x260 [ 2247.059769] ? __ia32_sys_read+0xb0/0xb0 [ 2247.060132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.060588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.061045] do_syscall_64+0x33/0x40 [ 2247.061371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2247.061815] RIP: 0033:0x7f64d3107b19 [ 2247.062147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.063788] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2247.064464] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2247.065086] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2247.065703] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.066326] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2247.067052] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 [ 2247.088697] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2247.133717] FAULT_INJECTION: forcing a failure. [ 2247.133717] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.135125] CPU: 0 PID: 25360 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2247.135801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.136618] Call Trace: [ 2247.136880] dump_stack+0x107/0x167 [ 2247.137240] should_fail.cold+0x5/0xa [ 2247.137639] ? create_object.isra.0+0x3a/0xa20 [ 2247.138091] should_failslab+0x5/0x20 [ 2247.138468] kmem_cache_alloc+0x5b/0x310 [ 2247.138910] create_object.isra.0+0x3a/0xa20 [ 2247.139333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2247.139830] kmem_cache_alloc+0x159/0x310 [ 2247.140241] xas_alloc+0x336/0x440 [ 2247.140590] xas_create+0x60f/0x10d0 [ 2247.140963] xas_store+0x8c/0x1c40 [ 2247.141313] ? xas_find_conflict+0x4b5/0xa70 [ 2247.141749] __add_to_page_cache_locked+0x708/0xc80 [ 2247.142242] ? file_write_and_wait_range+0x130/0x130 [ 2247.142748] ? lock_downgrade+0x6d0/0x6d0 [ 2247.143163] ? memcg_drain_all_list_lrus+0x720/0x720 [ 2247.143694] add_to_page_cache_lru+0xe6/0x2e0 [ 2247.144133] ? add_to_page_cache_locked+0x40/0x40 [ 2247.144556] ? __page_cache_alloc+0x10d/0x360 [ 2247.144956] page_cache_ra_unbounded+0x419/0x6f0 [ 2247.145375] ? read_pages+0xbc0/0xbc0 [ 2247.145708] ? __lock_page_or_retry+0x4e0/0x4e0 [ 2247.146133] ondemand_readahead+0x8e5/0x1150 [ 2247.146539] page_cache_sync_ra+0x138/0x170 [ 2247.146923] generic_file_buffered_read+0xc8e/0x2920 [ 2247.147395] ? pagecache_get_page+0xc80/0xc80 [ 2247.147798] ? _cond_resched+0x12/0x80 [ 2247.148151] ? inode_security+0x107/0x140 [ 2247.148517] generic_file_read_iter+0x33f/0x490 [ 2247.148924] ? security_file_permission+0x24e/0x570 [ 2247.149364] blkdev_read_iter+0x127/0x1c0 [ 2247.149727] ? blkdev_write_iter+0x550/0x550 [ 2247.150108] io_read+0x2dc/0x11e0 [ 2247.150421] ? kiocb_done+0xc90/0xc90 [ 2247.150788] ? stack_trace_consume_entry+0x160/0x160 [ 2247.151243] ? lock_acquire+0x197/0x470 [ 2247.151596] ? __lock_acquire+0xbb1/0x5b00 [ 2247.151969] io_issue_sqe+0x2e8a/0x7700 [ 2247.152327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2247.152788] ? lock_chain_count+0x20/0x20 [ 2247.153161] ? __is_insn_slot_addr+0x14c/0x290 [ 2247.153560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2247.154024] ? io_connect+0x610/0x610 [ 2247.154359] ? lock_acquire+0x197/0x470 [ 2247.154719] ? find_held_lock+0x2c/0x110 [ 2247.155082] ? __fget_files+0x26d/0x4c0 [ 2247.155435] ? lock_downgrade+0x6d0/0x6d0 [ 2247.155808] __io_queue_sqe+0x90/0x9d0 [ 2247.156156] ? io_issue_sqe+0x7700/0x7700 [ 2247.156518] ? __io_file_supports_nowait+0x2c4/0x510 [ 2247.156958] ? io_prep_rw+0x7f5/0x1050 [ 2247.157302] io_submit_sqes+0x4461/0x85c0 [ 2247.157680] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2247.158113] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2247.158554] ? lock_downgrade+0x6d0/0x6d0 [ 2247.158922] ? find_held_lock+0x2c/0x110 [ 2247.159285] ? io_submit_sqes+0x85c0/0x85c0 [ 2247.159667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2247.160094] ? wait_for_completion_io+0x270/0x270 [ 2247.160523] ? rcu_read_lock_any_held+0x75/0xa0 [ 2247.160927] ? vfs_write+0x354/0xa70 [ 2247.161259] ? fput_many+0x2f/0x1a0 [ 2247.161581] ? ksys_write+0x1a9/0x260 [ 2247.161915] ? __ia32_sys_read+0xb0/0xb0 [ 2247.162271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.162748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.163209] do_syscall_64+0x33/0x40 [ 2247.163542] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2247.163995] RIP: 0033:0x7fd62f372b19 [ 2247.164320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.165896] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2247.166572] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2247.167195] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2247.167810] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2247.168431] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2247.169064] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 10:24:38 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000), 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2247.225339] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2247.381557] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2247.382453] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2247.383084] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2247.383642] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2247.384311] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 10:24:52 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 30) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) 10:24:52 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffea, 0x0, 0x0, 0x0) 10:24:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 10:24:52 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 10:24:52 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000), 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 10:24:52 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) 10:24:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 15) 10:24:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 6) [ 2261.737343] FAULT_INJECTION: forcing a failure. [ 2261.737343] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.738454] CPU: 1 PID: 25478 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2261.739575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.740227] Call Trace: [ 2261.740445] dump_stack+0x107/0x167 [ 2261.740741] should_fail.cold+0x5/0xa [ 2261.741057] should_failslab+0x5/0x20 [ 2261.741370] __kmalloc_track_caller+0x79/0x370 [ 2261.741739] ? simple_xattr_set+0x93/0x610 [ 2261.742087] kstrdup+0x36/0x70 [ 2261.742355] simple_xattr_set+0x93/0x610 [ 2261.742700] kernfs_xattr_set+0x50/0x80 [ 2261.743040] selinux_kernfs_init_security+0x26d/0x4c0 [ 2261.743457] ? selinux_file_mprotect+0x610/0x610 [ 2261.743840] ? find_held_lock+0x2c/0x110 [ 2261.744175] ? __kernfs_new_node+0x2ad/0x860 [ 2261.744553] ? rwlock_bug.part.0+0x90/0x90 [ 2261.744904] security_kernfs_init_security+0x4e/0xb0 [ 2261.745317] __kernfs_new_node+0x531/0x860 [ 2261.745664] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2261.746048] ? cpumask_next+0x1f/0x30 [ 2261.746357] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2261.750776] ? pcpu_alloc+0x12a/0x1240 [ 2261.751100] kernfs_new_node+0x18d/0x250 [ 2261.751435] kernfs_create_dir_ns+0x49/0x160 [ 2261.751795] cgroup_mkdir+0x318/0xf50 [ 2261.752108] ? cgroup_destroy_locked+0x710/0x710 [ 2261.752491] kernfs_iop_mkdir+0x14d/0x1e0 [ 2261.752829] vfs_mkdir+0x493/0x700 [ 2261.753124] do_mkdirat+0x150/0x2b0 [ 2261.753421] ? user_path_create+0xf0/0xf0 [ 2261.753765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.754188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.754613] do_syscall_64+0x33/0x40 [ 2261.754933] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2261.755343] RIP: 0033:0x7fe0a7580b19 [ 2261.755645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.757105] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2261.757718] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2261.758287] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2261.759084] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.759660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2261.760232] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 [ 2261.780020] FAULT_INJECTION: forcing a failure. [ 2261.780020] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.781085] CPU: 1 PID: 25490 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2261.781717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.782480] Call Trace: [ 2261.782746] dump_stack+0x107/0x167 [ 2261.783098] should_fail.cold+0x5/0xa [ 2261.783463] ? create_object.isra.0+0x3a/0xa20 [ 2261.783901] should_failslab+0x5/0x20 [ 2261.784266] kmem_cache_alloc+0x5b/0x310 [ 2261.784655] ? mark_held_locks+0x9e/0xe0 [ 2261.785045] create_object.isra.0+0x3a/0xa20 [ 2261.785463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2261.785952] kmem_cache_alloc_bulk+0x168/0x320 [ 2261.786393] io_submit_sqes+0x6f76/0x85c0 [ 2261.786804] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2261.787275] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2261.787749] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2261.788187] ? lock_downgrade+0x6d0/0x6d0 [ 2261.788551] ? find_held_lock+0x2c/0x110 [ 2261.788927] ? io_submit_sqes+0x85c0/0x85c0 [ 2261.789309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2261.789724] ? wait_for_completion_io+0x270/0x270 [ 2261.790142] ? rcu_read_lock_any_held+0x75/0xa0 [ 2261.790543] ? vfs_write+0x354/0xa70 [ 2261.790882] ? fput_many+0x2f/0x1a0 [ 2261.791188] ? ksys_write+0x1a9/0x260 [ 2261.791508] ? __ia32_sys_read+0xb0/0xb0 [ 2261.791852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.792319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.792781] do_syscall_64+0x33/0x40 [ 2261.793112] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2261.793573] RIP: 0033:0x7f64d3107b19 [ 2261.793895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.799724] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2261.800392] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2261.801003] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2261.801632] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.802198] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2261.802777] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 10:24:53 executing program 0: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x10032}, 0x48, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000680)="eb25616a141ee31713cfee7d643f5b76844d824d78c951aa202cb8c97e56678dac82197c2105fc089ad7a62315a3ce0735af3471f7d3e5c745eaae8dafbd5edac88cb3c006bc3d5f0d95518d0873ca1174a252b42285e696a1386313ba0e2fe619d511819791bd804957f699130c488bf17912a1bf05504f393b1d8507c7b95adf25167c49b0042c0388af04b5cc03aded9389511010f0351f1121783c1bef274e7145f26d", 0xa5, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/227, 0xe3}], 0x2) [ 2261.859551] FAULT_INJECTION: forcing a failure. [ 2261.859551] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.860608] CPU: 1 PID: 25501 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2261.861217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.861953] Call Trace: [ 2261.862202] dump_stack+0x107/0x167 [ 2261.862529] should_fail.cold+0x5/0xa [ 2261.862880] ? xas_alloc+0x336/0x440 [ 2261.863190] should_failslab+0x5/0x20 [ 2261.863500] kmem_cache_alloc+0x5b/0x310 [ 2261.863827] xas_alloc+0x336/0x440 [ 2261.864116] xas_create+0x34a/0x10d0 [ 2261.864424] ? kernel_text_address+0xf2/0x120 [ 2261.864793] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2261.865257] xas_store+0x8c/0x1c40 [ 2261.865572] __xa_store+0x164/0x2d0 [ 2261.865879] ? xa_delete_node+0x280/0x280 [ 2261.866239] ? trace_hardirqs_on+0x5b/0x180 [ 2261.866605] xa_store+0x31/0x50 [ 2261.866922] __io_uring_add_tctx_node+0x1cf/0x520 [ 2261.867336] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2261.867767] __do_sys_io_uring_enter+0x1489/0x18c0 [ 2261.868167] ? lock_downgrade+0x6d0/0x6d0 [ 2261.868508] ? find_held_lock+0x2c/0x110 [ 2261.868845] ? io_submit_sqes+0x85c0/0x85c0 [ 2261.869200] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2261.869587] ? wait_for_completion_io+0x270/0x270 [ 2261.869975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2261.870357] ? vfs_write+0x354/0xa70 [ 2261.870664] ? fput_many+0x2f/0x1a0 [ 2261.870969] ? ksys_write+0x1a9/0x260 [ 2261.871276] ? __ia32_sys_read+0xb0/0xb0 [ 2261.871607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.872059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.872520] do_syscall_64+0x33/0x40 [ 2261.872835] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2261.873270] RIP: 0033:0x7fd62f372b19 [ 2261.873596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.875170] RSP: 002b:00007fd62c8a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2261.875819] RAX: ffffffffffffffda RBX: 00007fd62f4860e0 RCX: 00007fd62f372b19 [ 2261.876426] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2261.877053] RBP: 00007fd62c8a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.877676] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2261.878319] R13: 00007fff4366632f R14: 00007fd62c8a6300 R15: 0000000000022000 10:24:53 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x58502, 0x4) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 31) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x0) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 2261.944141] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value 10:24:53 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 7) [ 2262.012120] FAULT_INJECTION: forcing a failure. [ 2262.012120] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.013543] CPU: 0 PID: 25511 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 2262.014148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.014881] Call Trace: [ 2262.015119] dump_stack+0x107/0x167 [ 2262.015443] should_fail.cold+0x5/0xa [ 2262.015784] ? create_object.isra.0+0x3a/0xa20 [ 2262.016184] should_failslab+0x5/0x20 [ 2262.016521] kmem_cache_alloc+0x5b/0x310 [ 2262.016880] ? find_held_lock+0x2c/0x110 [ 2262.017243] create_object.isra.0+0x3a/0xa20 [ 2262.017628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2262.018073] kmem_cache_alloc+0x159/0x310 [ 2262.018445] __kernfs_iattrs+0xbc/0x470 [ 2262.018809] kernfs_xattr_set+0x2b/0x80 [ 2262.019172] selinux_kernfs_init_security+0x26d/0x4c0 [ 2262.019623] ? selinux_file_mprotect+0x610/0x610 [ 2262.020037] ? find_held_lock+0x2c/0x110 [ 2262.020397] ? __kernfs_new_node+0x2ad/0x860 [ 2262.020786] ? rwlock_bug.part.0+0x90/0x90 [ 2262.021165] security_kernfs_init_security+0x4e/0xb0 [ 2262.021614] __kernfs_new_node+0x531/0x860 [ 2262.021992] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2262.022411] ? cpumask_next+0x1f/0x30 [ 2262.022884] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2262.023292] ? pcpu_alloc+0x12a/0x1240 [ 2262.023641] kernfs_new_node+0x18d/0x250 [ 2262.024000] kernfs_create_dir_ns+0x49/0x160 [ 2262.024387] cgroup_mkdir+0x318/0xf50 [ 2262.024724] ? cgroup_destroy_locked+0x710/0x710 [ 2262.025137] kernfs_iop_mkdir+0x14d/0x1e0 [ 2262.025501] vfs_mkdir+0x493/0x700 [ 2262.025822] do_mkdirat+0x150/0x2b0 [ 2262.026192] ? user_path_create+0xf0/0xf0 [ 2262.026612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.031167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.031683] do_syscall_64+0x33/0x40 [ 2262.032056] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2262.032564] RIP: 0033:0x7fe0a7580b19 [ 2262.032933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.034736] RSP: 002b:00007fe0a4af6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2262.035498] RAX: ffffffffffffffda RBX: 00007fe0a7693f60 RCX: 00007fe0a7580b19 [ 2262.036200] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005 [ 2262.036902] RBP: 00007fe0a4af61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.037604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2262.038311] R13: 00007ffd16df67ef R14: 00007fe0a4af6300 R15: 0000000000022000 10:24:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x8000000000001, 0x0, 0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x100, 0x1b}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) (fail_nth: 16) [ 2262.058954] FAULT_INJECTION: forcing a failure. [ 2262.058954] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.059849] CPU: 1 PID: 25513 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2262.060398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.061045] Call Trace: [ 2262.061265] dump_stack+0x107/0x167 [ 2262.061560] should_fail.cold+0x5/0xa [ 2262.061867] ? create_object.isra.0+0x3a/0xa20 [ 2262.062233] should_failslab+0x5/0x20 [ 2262.062538] kmem_cache_alloc+0x5b/0x310 [ 2262.062875] ? mark_held_locks+0x9e/0xe0 [ 2262.063201] create_object.isra.0+0x3a/0xa20 [ 2262.063551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2262.063955] kmem_cache_alloc_bulk+0x168/0x320 [ 2262.064324] io_submit_sqes+0x6f76/0x85c0 [ 2262.064654] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2262.065050] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2262.065444] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2262.065831] ? lock_downgrade+0x6d0/0x6d0 [ 2262.066163] ? find_held_lock+0x2c/0x110 [ 2262.066488] ? io_submit_sqes+0x85c0/0x85c0 [ 2262.066853] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2262.067238] ? wait_for_completion_io+0x270/0x270 [ 2262.067624] ? rcu_read_lock_any_held+0x75/0xa0 [ 2262.067993] ? vfs_write+0x354/0xa70 [ 2262.068289] ? fput_many+0x2f/0x1a0 [ 2262.068580] ? ksys_write+0x1a9/0x260 [ 2262.068885] ? __ia32_sys_read+0xb0/0xb0 [ 2262.069212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.069627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.070042] do_syscall_64+0x33/0x40 [ 2262.070340] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2262.070758] RIP: 0033:0x7f64d3107b19 [ 2262.071061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.079219] RSP: 002b:00007f64d067d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2262.079818] RAX: ffffffffffffffda RBX: 00007f64d321af60 RCX: 00007f64d3107b19 [ 2262.080379] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2262.080939] RBP: 00007f64d067d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.081557] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2262.082172] R13: 00007fff1a886a1f R14: 00007f64d067d300 R15: 0000000000022000 10:24:53 executing program 7: r0 = openat(0xffffffffffffffff, 0x0, 0x591900, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf696, 0x1, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x7}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30", 0xc, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2262.112118] FAULT_INJECTION: forcing a failure. [ 2262.112118] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.113009] CPU: 1 PID: 25547 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2262.113549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.114198] Call Trace: [ 2262.114419] dump_stack+0x107/0x167 [ 2262.114719] should_fail.cold+0x5/0xa [ 2262.115033] ? xas_alloc+0x336/0x440 [ 2262.115333] should_failslab+0x5/0x20 [ 2262.115638] kmem_cache_alloc+0x5b/0x310 [ 2262.115960] ? try_charge+0x62f/0x11b0 [ 2262.116274] xas_alloc+0x336/0x440 [ 2262.116561] xas_create+0x60f/0x10d0 [ 2262.116869] xas_store+0x8c/0x1c40 [ 2262.117156] ? xas_find_conflict+0x4b5/0xa70 [ 2262.117514] __add_to_page_cache_locked+0x708/0xc80 [ 2262.117915] ? file_write_and_wait_range+0x130/0x130 [ 2262.118318] ? lock_downgrade+0x6d0/0x6d0 [ 2262.118652] ? memcg_drain_all_list_lrus+0x720/0x720 [ 2262.119090] add_to_page_cache_lru+0xe6/0x2e0 [ 2262.119447] ? add_to_page_cache_locked+0x40/0x40 [ 2262.119831] ? __page_cache_alloc+0x10d/0x360 [ 2262.120193] page_cache_ra_unbounded+0x419/0x6f0 [ 2262.120580] ? read_pages+0xbc0/0xbc0 [ 2262.120883] ? __lock_page_or_retry+0x4e0/0x4e0 [ 2262.121260] ondemand_readahead+0x8e5/0x1150 [ 2262.121618] page_cache_sync_ra+0x138/0x170 [ 2262.121965] generic_file_buffered_read+0xc8e/0x2920 [ 2262.122389] ? pagecache_get_page+0xc80/0xc80 [ 2262.122763] ? _cond_resched+0x12/0x80 [ 2262.123080] ? inode_security+0x107/0x140 [ 2262.123418] generic_file_read_iter+0x33f/0x490 [ 2262.123794] ? security_file_permission+0x24e/0x570 [ 2262.124193] ? __is_insn_slot_addr+0x123/0x290 [ 2262.124560] blkdev_read_iter+0x127/0x1c0 [ 2262.124894] ? blkdev_write_iter+0x550/0x550 [ 2262.125246] io_read+0x2dc/0x11e0 [ 2262.125529] ? __is_insn_slot_addr+0x14c/0x290 [ 2262.125898] ? kiocb_done+0xc90/0xc90 [ 2262.126203] ? register_lock_class+0xbb/0x17b0 [ 2262.126568] ? arch_stack_walk+0x99/0xf0 [ 2262.126910] ? is_dynamic_key+0x1e0/0x1e0 [ 2262.127251] ? __lock_acquire+0x1657/0x5b00 [ 2262.127599] ? __lock_acquire+0xbb1/0x5b00 [ 2262.127943] io_issue_sqe+0x2e8a/0x7700 [ 2262.128267] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2262.128685] ? lock_chain_count+0x20/0x20 [ 2262.129021] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2262.129436] ? io_connect+0x610/0x610 [ 2262.129745] ? lock_acquire+0x197/0x470 [ 2262.130061] ? find_held_lock+0x2c/0x110 [ 2262.130391] ? __fget_files+0x26d/0x4c0 [ 2262.130718] ? lock_downgrade+0x6d0/0x6d0 [ 2262.131062] __io_queue_sqe+0x90/0x9d0 [ 2262.131384] ? io_issue_sqe+0x7700/0x7700 [ 2262.131716] ? __io_file_supports_nowait+0x2c4/0x510 [ 2262.132121] ? io_prep_rw+0x7f5/0x1050 [ 2262.132437] io_submit_sqes+0x4461/0x85c0 [ 2262.132784] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2262.133180] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2262.133573] ? lock_downgrade+0x6d0/0x6d0 [ 2262.133903] ? find_held_lock+0x2c/0x110 [ 2262.134232] ? io_submit_sqes+0x85c0/0x85c0 [ 2262.134586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2262.135001] ? wait_for_completion_io+0x270/0x270 [ 2262.135389] ? rcu_read_lock_any_held+0x75/0xa0 [ 2262.135759] ? vfs_write+0x354/0xa70 [ 2262.136057] ? fput_many+0x2f/0x1a0 [ 2262.136353] ? ksys_write+0x1a9/0x260 [ 2262.136659] ? __ia32_sys_read+0xb0/0xb0 [ 2262.136985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.137399] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.137814] do_syscall_64+0x33/0x40 [ 2262.138112] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2262.138520] RIP: 0033:0x7fd62f372b19 [ 2262.138834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.140283] RSP: 002b:00007fd62c8e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2262.140892] RAX: ffffffffffffffda RBX: 00007fd62f485f60 RCX: 00007fd62f372b19 [ 2262.141459] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2262.142022] RBP: 00007fd62c8e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.142588] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 2262.143197] R13: 00007fff4366632f R14: 00007fd62c8e8300 R15: 0000000000022000 10:24:53 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe2(0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5b1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) [ 2262.207765] FAT-fs (loop7): Unrecognized mount option "roDir" or missing value [ 2262.340351] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2262.343275] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2262.343887] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2262.344609] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 2262.345229] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 2275.822374] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88804f652d00 (size 144): comm "syz-executor.5", pid 25478, jiffies 4296928689 (age 21.446s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 f4 68 16 66 00 00 00 00 .........h.f.... dc 9a b4 38 00 00 00 00 f4 68 16 66 00 00 00 00 ...8.....h.f.... backtrace: [<00000000ad1502ea>] __kernfs_iattrs+0xbc/0x470 [<000000003201eb99>] kernfs_xattr_set+0x2b/0x80 [<0000000081123bc3>] selinux_kernfs_init_security+0x26d/0x4c0 [<000000002ae47437>] security_kernfs_init_security+0x4e/0xb0 [<00000000fc85ebe5>] __kernfs_new_node+0x531/0x860 [<000000003dd7dd01>] kernfs_new_node+0x18d/0x250 [<000000009377bd72>] kernfs_create_dir_ns+0x49/0x160 [<0000000028d2f65d>] cgroup_mkdir+0x318/0xf50 [<00000000c24ecd45>] kernfs_iop_mkdir+0x14d/0x1e0 [<00000000ef710179>] vfs_mkdir+0x493/0x700 [<00000000e9381b29>] do_mkdirat+0x150/0x2b0 [<00000000c5416c07>] do_syscall_64+0x33/0x40 [<00000000b4b56ec4>] entry_SYSCALL_64_after_hwframe+0x62/0xc7 BUG: leak checking failed VM DIAGNOSIS: 10:25:14 Registers: info registers vcpu 0 RAX=ffffffff83e68b60 RBX=0000000000000000 RCX=ffffffff83e5094c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e69168 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85673a48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e68b6e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555d45fc2678 CR3=000000000cc1c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004143149c00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806cf3b2c0 RCX=0000000000000001 RDX=1ffff1100d9e77b2 RSI=ffff88806cf3b2d8 RDI=0000000000000001 RBP=ffffffff85674a7c RSP=ffff88806cf09e30 R8 =0000000000000001 R9 =0000000000000003 R10=ffffed100d9e13c8 R11=0000000000000001 R12=ffff8880481d9a70 R13=ffff88806cf3bd90 R14=dffffc0000000000 R15=ffff88806cf3b2c0 RIP=ffffffff81102a50 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcb6fd9af0 CR3=000000000d284000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934343120657a697328203030643235 XMM03=3220646970202c22352e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020 XMM06=65747962203233207473726966282070 XMM07=31322065676128203938363832393639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000