0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
socket$inet(0x2, 0xa, 0x0)

[ 2838.766214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
01:55:26 executing program 3:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:55:26 executing program 0:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:55:26 executing program 6:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)

01:55:26 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:26 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r9=>0x0)
r10 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r10, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}}, 0x2)

01:55:26 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:26 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:26 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:55:26 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 2839.120638] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:55:26 executing program 1:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 2839.165014] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2839.299717] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2839.347029] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
01:55:41 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:55:41 executing program 6:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)

01:55:41 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r2, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:55:41 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r3, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:55:41 executing program 3:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:55:41 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:41 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r2, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:55:41 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0)

[ 2853.591662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2853.602734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
01:55:41 executing program 4:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:55:41 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:41 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r2, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2853.857676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
01:55:41 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r2, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2853.964140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
01:55:41 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r2, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:55:41 executing program 5:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:55:41 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0)

[ 2854.084342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
01:55:41 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:55:41 executing program 1:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
socket$inet(0x2, 0xa, 0x0)

01:55:41 executing program 0:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
setresuid(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt}]})

01:55:41 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:55:42 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r3, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 2854.388644] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2854.462325] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
01:55:56 executing program 5:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:56 executing program 4:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:55:56 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:55:56 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:55:56 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0)

01:55:56 executing program 3:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:56 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:56 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:55:56 executing program 1:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:55:56 executing program 3:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:55:56 executing program 5:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
socket$inet(0x2, 0xa, 0x0)

01:55:56 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2868.651402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
01:55:56 executing program 0:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
setresuid(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt}]})

[ 2868.936408] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2869.009045] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
01:56:08 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:08 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:56:08 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r3, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:56:08 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:08 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:08 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r3, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:56:08 executing program 0:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
setresuid(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt}]})

[ 2881.075199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:56:08 executing program 7:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 2881.090373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2881.180593] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:56:08 executing program 1:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:56:08 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

[ 2881.276217] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
01:56:08 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2881.321528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:56:09 executing program 5:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:56:09 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
socket$inet(0x2, 0xa, 0x0)

[ 2881.424655] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:56:09 executing program 4:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

[ 2881.519473] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
01:56:09 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:09 executing program 3:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 2881.822253] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2881.925423] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:56:21 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x2)

01:56:21 executing program 7:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:56:21 executing program 4:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:56:21 executing program 0:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:56:21 executing program 3:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:21 executing program 5:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:21 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:56:21 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

[ 2894.381218] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2894.444545] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[ 2908.976240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 2908.980647] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:56:36 executing program 1:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:56:36 executing program 6:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:56:36 executing program 0:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:56:36 executing program 5:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:36 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x2)

01:56:36 executing program 3:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:56:36 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:36 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)

[ 2909.027521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
01:56:36 executing program 4:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

[ 2909.080734] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:56:36 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x2)

01:56:36 executing program 5:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:36 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 2909.168554] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[ 2909.198508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
01:56:36 executing program 3:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:36 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:56:36 executing program 5:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:56:36 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:56:37 executing program 6:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)

01:56:37 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:56:37 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:37 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200)
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)

01:56:37 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 2909.484419] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:56:37 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

[ 2909.568931] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:56:37 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:56:37 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:37 executing program 5:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:37 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:37 executing program 5:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:51 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:51 executing program 7:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:51 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:51 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:51 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:51 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:56:51 executing program 5:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:56:51 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

[ 2924.196494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2924.216118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2924.228238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:56:51 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:51 executing program 7:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:51 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:56:52 executing program 5:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:57:07 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:57:07 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

01:57:07 executing program 3:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:57:07 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:57:07 executing program 1:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:57:07 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:57:07 executing program 5:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:57:07 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:57:07 executing program 4:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

01:57:07 executing program 0:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
unshare(0x48020200)

01:57:08 executing program 1:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:57:08 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

01:57:08 executing program 7:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)

01:57:08 executing program 6:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip_tables_matches\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x1000)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000440), 0xc, &(0x7f0000002b80)={&(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="000329bd7000fddbdf2518000000050005000000000005000600000000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20000090)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001)

01:57:08 executing program 5:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:08 executing program 3:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:08 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:08 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

01:57:08 executing program 7:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:57:25 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

01:57:25 executing program 6:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 5:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

01:57:25 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

01:57:25 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2957.674077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 2957.687151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2957.696151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2957.700691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
01:57:25 executing program 6:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:57:25 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 3:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 0:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:25 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2957.904284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'.
01:57:39 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:57:39 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]}) (fail_nth: 1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:57:39 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:57:39 executing program 6:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:39 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:57:39 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:39 executing program 4:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz1\x00', 0x1ff)
r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)

01:57:39 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 2972.100180] FAULT_INJECTION: forcing a failure.
[ 2972.100180] name failslab, interval 1, probability 0, space 0, times 1
[ 2972.103174] CPU: 1 PID: 14693 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 2972.104708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.106555] Call Trace:
[ 2972.107140]  dump_stack+0x107/0x167
[ 2972.107953]  should_fail.cold+0x5/0xa
[ 2972.108821]  should_failslab+0x5/0x20
[ 2972.109658]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2972.110647]  io_submit_sqes+0x6fe6/0x8610
[ 2972.111565]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2972.112681]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2972.113781]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2972.114873]  ? find_held_lock+0x2c/0x110
[ 2972.115771]  ? io_submit_sqes+0x8610/0x8610
[ 2972.116763]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2972.117829]  ? wait_for_completion_io+0x270/0x270
[ 2972.118903]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2972.119944]  ? vfs_write+0x354/0xb10
[ 2972.120811]  ? fput_many+0x2f/0x1a0
[ 2972.121615]  ? ksys_write+0x1a9/0x260
[ 2972.122468]  ? __ia32_sys_read+0xb0/0xb0
[ 2972.123393]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.124582]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.125732]  do_syscall_64+0x33/0x40
[ 2972.126565]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.126701] FAULT_INJECTION: forcing a failure.
[ 2972.126701] name failslab, interval 1, probability 0, space 0, times 1
[ 2972.127694] RIP: 0033:0x7fbf3f14eb19
[ 2972.127715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.127728] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2972.127748] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 2972.127759] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2972.127778] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.141373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.142947] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
[ 2972.144584] CPU: 0 PID: 14699 Comm: syz-executor.0 Not tainted 5.10.232 #1
[ 2972.146077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.147824] Call Trace:
[ 2972.148400]  dump_stack+0x107/0x167
[ 2972.149168]  should_fail.cold+0x5/0xa
[ 2972.149975]  should_failslab+0x5/0x20
[ 2972.150776]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2972.151722]  io_submit_sqes+0x6fe6/0x8610
[ 2972.152624]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2972.153669]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2972.154723]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2972.155738]  ? find_held_lock+0x2c/0x110
[ 2972.156605]  ? io_submit_sqes+0x8610/0x8610
[ 2972.157525]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2972.158545]  ? wait_for_completion_io+0x270/0x270
[ 2972.159566]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2972.160550]  ? vfs_write+0x354/0xb10
[ 2972.161337]  ? fput_many+0x2f/0x1a0
[ 2972.162104]  ? ksys_write+0x1a9/0x260
[ 2972.162908]  ? __ia32_sys_read+0xb0/0xb0
[ 2972.163770]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.164890]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.165979]  do_syscall_64+0x33/0x40
[ 2972.166766]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.167855] RIP: 0033:0x7fd7c3eddb19
[ 2972.168649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.172551] RSP: 002b:00007fd7c1453188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2972.174154] RAX: ffffffffffffffda RBX: 00007fd7c3ff0f60 RCX: 00007fd7c3eddb19
[ 2972.175647] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2972.176272] FAULT_INJECTION: forcing a failure.
[ 2972.176272] name failslab, interval 1, probability 0, space 0, times 0
[ 2972.177161] RBP: 00007fd7c14531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.177171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.177182] R13: 00007ffe0a197a8f R14: 00007fd7c1453300 R15: 0000000000022000
[ 2972.179179] FAULT_INJECTION: forcing a failure.
[ 2972.179179] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2972.180120] CPU: 1 PID: 14700 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2972.188643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.190465] Call Trace:
[ 2972.191062]  dump_stack+0x107/0x167
[ 2972.191861]  should_fail.cold+0x5/0xa
[ 2972.192722]  should_failslab+0x5/0x20
[ 2972.193557]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2972.194543]  io_submit_sqes+0x6fe6/0x8610
[ 2972.195469]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2972.196576]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2972.197673]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2972.198719]  ? find_held_lock+0x2c/0x110
[ 2972.199630]  ? io_submit_sqes+0x8610/0x8610
[ 2972.200589]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2972.201656]  ? wait_for_completion_io+0x270/0x270
[ 2972.202712]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2972.203738]  ? vfs_write+0x354/0xb10
[ 2972.204558]  ? fput_many+0x2f/0x1a0
[ 2972.205370]  ? ksys_write+0x1a9/0x260
[ 2972.206222]  ? __ia32_sys_read+0xb0/0xb0
[ 2972.207107]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.208268]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.209404]  do_syscall_64+0x33/0x40
[ 2972.210214]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.211330] RIP: 0033:0x7f282e625b19
[ 2972.212162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.216166] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2972.217854] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 2972.219408] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2972.221005] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.222547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.224110] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 2972.225718] CPU: 0 PID: 14702 Comm: syz-executor.5 Not tainted 5.10.232 #1
[ 2972.227239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.228996] Call Trace:
[ 2972.229557]  dump_stack+0x107/0x167
[ 2972.230320]  should_fail.cold+0x5/0xa
[ 2972.231122]  _copy_from_user+0x2e/0x1b0
[ 2972.231972]  ext4_ioc_getfsmap+0xd0/0x620
[ 2972.232841]  ? ext4_ioctl_setflags+0xbe0/0xbe0
[ 2972.233797]  ? find_held_lock+0x2c/0x110
[ 2972.234646]  ? avc_has_extended_perms+0x675/0xf40
[ 2972.235661]  ? avc_has_extended_perms+0x7f1/0xf40
[ 2972.236681]  ? __lock_acquire+0xbb1/0x5b00
[ 2972.237560]  ? avc_ss_reset+0x180/0x180
[ 2972.238394]  ? lock_downgrade+0x6d0/0x6d0
[ 2972.239258]  __ext4_ioctl+0x8ad/0x4190
[ 2972.240085]  ? ext4_reset_inode_seed+0x450/0x450
[ 2972.241075]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2972.242170]  ? find_held_lock+0x2c/0x110
[ 2972.243032]  ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410
[ 2972.244244]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2972.245324]  ? do_vfs_ioctl+0x283/0x10d0
[ 2972.246174]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 2972.247281]  ? generic_block_fiemap+0x60/0x60
[ 2972.248228]  ? lock_downgrade+0x6d0/0x6d0
[ 2972.249096]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2972.250113]  ? wait_for_completion_io+0x270/0x270
[ 2972.251127]  ? selinux_file_ioctl+0xb6/0x270
[ 2972.252051]  ? __ext4_ioctl+0x4190/0x4190
[ 2972.252924]  __x64_sys_ioctl+0x19a/0x210
[ 2972.253776]  do_syscall_64+0x33/0x40
[ 2972.254558]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.255632] RIP: 0033:0x7f14e1488b19
[ 2972.256417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.260260] RSP: 002b:00007f14de9fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2972.261863] RAX: ffffffffffffffda RBX: 00007f14e159bf60 RCX: 00007f14e1488b19
[ 2972.263360] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000005
[ 2972.264888] RBP: 00007f14de9fe1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.266383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.267875] R13: 00007ffcf26e979f R14: 00007f14de9fe300 R15: 0000000000022000
01:57:40 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r0 = syz_io_uring_setup(0x368c, &(0x7f0000000180), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x2)

01:57:40 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:57:40 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001) (fail_nth: 1)

01:57:40 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 1)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2972.417339] FAULT_INJECTION: forcing a failure.
[ 2972.417339] name failslab, interval 1, probability 0, space 0, times 0
[ 2972.419954] CPU: 0 PID: 14718 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 2972.421424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.423172] Call Trace:
[ 2972.423736]  dump_stack+0x107/0x167
[ 2972.424523]  should_fail.cold+0x5/0xa
[ 2972.425337]  ? getname_flags.part.0+0x50/0x4f0
[ 2972.426309]  should_failslab+0x5/0x20
[ 2972.427126]  kmem_cache_alloc+0x5b/0x310
[ 2972.427999]  getname_flags.part.0+0x50/0x4f0
[ 2972.428938]  getname_flags+0x9a/0xe0
[ 2972.429728]  do_mkdirat+0x8f/0x2b0
[ 2972.430493]  ? user_path_create+0xf0/0xf0
[ 2972.431375]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.432491]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.433581]  do_syscall_64+0x33/0x40
[ 2972.434355]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.435434] RIP: 0033:0x7fd21301bb19
[ 2972.436226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.440141] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2972.441746] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 2972.443261] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2972.443492] FAULT_INJECTION: forcing a failure.
[ 2972.443492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2972.444774] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.444785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.444796] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 2972.451683] FAULT_INJECTION: forcing a failure.
[ 2972.451683] name failslab, interval 1, probability 0, space 0, times 0
[ 2972.453165] CPU: 1 PID: 14721 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2972.457021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.458845] Call Trace:
[ 2972.459432]  dump_stack+0x107/0x167
[ 2972.460267]  should_fail.cold+0x5/0xa
[ 2972.461113]  _copy_from_user+0x2e/0x1b0
[ 2972.462003]  __copy_msghdr_from_user+0x91/0x4b0
[ 2972.463039]  ? __ia32_sys_shutdown+0x80/0x80
[ 2972.464040]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2972.465215]  ? __lock_acquire+0x1657/0x5b00
[ 2972.466170]  ? __lock_acquire+0xbb1/0x5b00
[ 2972.467104]  sendmsg_copy_msghdr+0xa1/0x160
[ 2972.468056]  ? do_recvmmsg+0x6d0/0x6d0
[ 2972.468937]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2972.470110]  ? lock_downgrade+0x6d0/0x6d0
[ 2972.471047]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2972.472203]  ___sys_sendmsg+0xc6/0x170
[ 2972.473061]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2972.474081]  ? __fget_files+0x2cf/0x520
[ 2972.474956]  ? lock_downgrade+0x6d0/0x6d0
[ 2972.475861]  ? find_held_lock+0x2c/0x110
[ 2972.476779]  ? __fget_files+0x2f8/0x520
[ 2972.477661]  ? __fget_light+0xea/0x290
[ 2972.478530]  __sys_sendmsg+0xe5/0x1b0
[ 2972.479410]  ? __sys_sendmsg_sock+0x40/0x40
[ 2972.480387]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2972.481423]  ? fput_many+0x2f/0x1a0
[ 2972.482237]  ? ksys_write+0x1a9/0x260
[ 2972.483178]  ? __ia32_sys_read+0xb0/0xb0
[ 2972.484023]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.485118]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.486185]  ? trace_hardirqs_on+0x5b/0x180
[ 2972.487088]  do_syscall_64+0x33/0x40
[ 2972.487862]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.488936] RIP: 0033:0x7f40efdc7b19
[ 2972.489710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.493500] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2972.495066] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 2972.496548] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 2972.498018] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.499485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.500989] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 2972.502493] CPU: 0 PID: 14717 Comm: syz-executor.1 Not tainted 5.10.232 #1
[ 2972.503974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.505725] Call Trace:
[ 2972.506283]  dump_stack+0x107/0x167
[ 2972.507062]  should_fail.cold+0x5/0xa
[ 2972.507874]  ? alloc_pipe_info+0x10a/0x590
[ 2972.508773]  should_failslab+0x5/0x20
[ 2972.509574]  kmem_cache_alloc_trace+0x55/0x320
[ 2972.510546]  alloc_pipe_info+0x10a/0x590
[ 2972.511415]  splice_direct_to_actor+0x774/0x980
[ 2972.512414]  ? _cond_resched+0x12/0x80
[ 2972.513238]  ? inode_security+0x107/0x140
[ 2972.514114]  ? pipe_to_sendpage+0x380/0x380
[ 2972.515027]  ? avc_policy_seqno+0x9/0x70
[ 2972.515886]  ? selinux_file_permission+0x92/0x520
[ 2972.516914]  ? do_splice_to+0x160/0x160
[ 2972.517751]  ? security_file_permission+0xb1/0xe0
[ 2972.518772]  do_splice_direct+0x1c4/0x290
[ 2972.519648]  ? splice_direct_to_actor+0x980/0x980
[ 2972.520683]  ? avc_policy_seqno+0x9/0x70
[ 2972.521546]  ? security_file_permission+0xb1/0xe0
[ 2972.522576]  do_sendfile+0x553/0x11e0
[ 2972.523412]  ? do_pwritev+0x270/0x270
[ 2972.524226]  ? wait_for_completion_io+0x270/0x270
[ 2972.525248]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2972.526222]  ? vfs_write+0x354/0xb10
[ 2972.527010]  __x64_sys_sendfile64+0x1d1/0x210
[ 2972.527959]  ? __ia32_sys_sendfile+0x220/0x220
[ 2972.528945]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.530052]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.531152]  do_syscall_64+0x33/0x40
[ 2972.531938]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.533024] RIP: 0033:0x7f1ab263bb19
[ 2972.533807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.537688] RSP: 002b:00007f1aafbb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2972.539301] RAX: ffffffffffffffda RBX: 00007f1ab274ef60 RCX: 00007f1ab263bb19
[ 2972.540808] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[ 2972.542305] RBP: 00007f1aafbb11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.543800] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001
[ 2972.545322] R13: 00007ffe557829ef R14: 00007f1aafbb1300 R15: 0000000000022000
01:57:40 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r0 = syz_io_uring_setup(0x368c, &(0x7f0000000180), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x2)

[ 2972.585391] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2972.605980] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:57:40 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:57:40 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r0 = syz_io_uring_setup(0x368c, &(0x7f0000000180), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'})
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x2)

[ 2972.733769] FAULT_INJECTION: forcing a failure.
[ 2972.733769] name failslab, interval 1, probability 0, space 0, times 0
[ 2972.736476] CPU: 0 PID: 14732 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 2972.737937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.739682] Call Trace:
[ 2972.740252]  dump_stack+0x107/0x167
[ 2972.741020]  should_fail.cold+0x5/0xa
[ 2972.741826]  ? create_object.isra.0+0x3a/0xa20
[ 2972.742793]  should_failslab+0x5/0x20
[ 2972.743593]  kmem_cache_alloc+0x5b/0x310
[ 2972.744456]  ? ksys_write+0x21a/0x260
[ 2972.745257]  create_object.isra.0+0x3a/0xa20
[ 2972.746181]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2972.747245]  kmem_cache_alloc+0x159/0x310
[ 2972.748121]  getname_flags.part.0+0x50/0x4f0
[ 2972.749039]  getname_flags+0x9a/0xe0
[ 2972.749816]  do_mkdirat+0x8f/0x2b0
[ 2972.750568]  ? user_path_create+0xf0/0xf0
[ 2972.751459]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2972.752594]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2972.753690]  do_syscall_64+0x33/0x40
[ 2972.754486]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.755575] RIP: 0033:0x7fd21301bb19
[ 2972.756379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.760250] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2972.761848] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 2972.763349] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2972.764849] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.766333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.767840] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
01:57:40 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]}) (fail_nth: 2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 2972.861338] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2972.874104] FAULT_INJECTION: forcing a failure.
[ 2972.874104] name failslab, interval 1, probability 0, space 0, times 0
[ 2972.876996] CPU: 0 PID: 14737 Comm: syz-executor.5 Not tainted 5.10.232 #1
[ 2972.878447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.880208] Call Trace:
[ 2972.880761]  dump_stack+0x107/0x167
[ 2972.881525]  should_fail.cold+0x5/0xa
[ 2972.882316]  ? ext4_getfsmap_datadev+0x6d7/0x25e0
[ 2972.883325]  should_failslab+0x5/0x20
[ 2972.884140]  kmem_cache_alloc_trace+0x55/0x320
[ 2972.885099]  ? ext4_get_group_desc+0x2a0/0x560
[ 2972.886062]  ext4_getfsmap_datadev+0x6d7/0x25e0
[ 2972.887067]  ? ext4_getfsmap_datadev_helper+0x8a0/0x8a0
[ 2972.888193]  ? do_swap+0x134/0x210
[ 2972.888935]  ? sort_r+0x239/0x360
[ 2972.889667]  ? ext4_file_open+0xa50/0xa50
[ 2972.890543]  ext4_getfsmap+0x695/0x990
[ 2972.891354]  ? ext4_getfsmap_datadev_helper+0x8a0/0x8a0
[ 2972.892488]  ? ext4_fsmap_to_internal+0x260/0x260
[ 2972.893500]  ? ext4_ioctl_check_immutable+0x200/0x200
[ 2972.894629]  ? ext4_getfsmap_datadev_helper+0x8a0/0x8a0
[ 2972.895769]  ext4_ioc_getfsmap+0x2b0/0x620
[ 2972.896674]  ? ext4_ioctl_setflags+0xbe0/0xbe0
[ 2972.897638]  ? find_held_lock+0x2c/0x110
[ 2972.898500]  ? avc_has_extended_perms+0x675/0xf40
[ 2972.899548]  ? lock_downgrade+0x6d0/0x6d0
[ 2972.900428]  __ext4_ioctl+0x8ad/0x4190
[ 2972.901252]  ? ext4_reset_inode_seed+0x450/0x450
[ 2972.902247]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2972.903351]  ? find_held_lock+0x2c/0x110
[ 2972.904222]  ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410
[ 2972.905437]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2972.906514]  ? do_vfs_ioctl+0x283/0x10d0
[ 2972.907359]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 2972.908486]  ? generic_block_fiemap+0x60/0x60
[ 2972.909418]  ? lock_downgrade+0x6d0/0x6d0
[ 2972.910307]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2972.911327]  ? wait_for_completion_io+0x270/0x270
[ 2972.912352]  ? selinux_file_ioctl+0xb6/0x270
[ 2972.913274]  ? __ext4_ioctl+0x4190/0x4190
[ 2972.914139]  __x64_sys_ioctl+0x19a/0x210
[ 2972.914995]  do_syscall_64+0x33/0x40
[ 2972.915808]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2972.916889] RIP: 0033:0x7f14e1488b19
[ 2972.917663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.921518] RSP: 002b:00007f14de9fe188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2972.923122] RAX: ffffffffffffffda RBX: 00007f14e159bf60 RCX: 00007f14e1488b19
[ 2972.924626] RDX: 0000000020000080 RSI: 00000000c0c0583b RDI: 0000000000000005
[ 2972.926117] RBP: 00007f14de9fe1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.927625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2972.929126] R13: 00007ffcf26e979f R14: 00007f14de9fe300 R15: 0000000000022000
[ 2972.978988] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:57:53 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:57:53 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:57:53 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]}) (fail_nth: 3)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:57:53 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:57:53 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:57:54 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001) (fail_nth: 2)

01:57:54 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:57:54 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 2)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2986.361564] FAULT_INJECTION: forcing a failure.
[ 2986.361564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2986.364135] CPU: 1 PID: 14759 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2986.365505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.367118] Call Trace:
[ 2986.367635]  dump_stack+0x107/0x167
[ 2986.368360]  should_fail.cold+0x5/0xa
[ 2986.369131]  _copy_from_user+0x2e/0x1b0
[ 2986.369927]  iovec_from_user+0x141/0x400
[ 2986.370767]  __import_iovec+0x67/0x590
[ 2986.371539]  ? __ia32_sys_shutdown+0x80/0x80
[ 2986.372411]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2986.373521]  import_iovec+0x83/0xb0
[ 2986.374287]  sendmsg_copy_msghdr+0x131/0x160
[ 2986.374768] FAULT_INJECTION: forcing a failure.
[ 2986.374768] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.375194]  ? do_recvmmsg+0x6d0/0x6d0
[ 2986.375219]  ? lock_downgrade+0x6d0/0x6d0
[ 2986.375241]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2986.375264]  ___sys_sendmsg+0xc6/0x170
[ 2986.375291]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2986.382092]  ? __fget_files+0x2cf/0x520
[ 2986.382911]  ? lock_downgrade+0x6d0/0x6d0
[ 2986.383759]  ? find_held_lock+0x2c/0x110
[ 2986.384611]  ? __fget_files+0x2f8/0x520
[ 2986.385435]  ? __fget_light+0xea/0x290
[ 2986.386249]  __sys_sendmsg+0xe5/0x1b0
[ 2986.387037]  ? __sys_sendmsg_sock+0x40/0x40
[ 2986.387919]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.388888]  ? fput_many+0x2f/0x1a0
[ 2986.389637]  ? ksys_write+0x1a9/0x260
[ 2986.390432]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.391506]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.392580]  ? trace_hardirqs_on+0x5b/0x180
[ 2986.393469]  do_syscall_64+0x33/0x40
[ 2986.394235]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.395272] RIP: 0033:0x7f40efdc7b19
[ 2986.395986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.399241] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2986.400630] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 2986.401975] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 2986.403308] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.404661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.405988] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 2986.407322] CPU: 0 PID: 14758 Comm: syz-executor.0 Not tainted 5.10.232 #1
[ 2986.408796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.410548] Call Trace:
[ 2986.411113]  dump_stack+0x107/0x167
[ 2986.411879]  should_fail.cold+0x5/0xa
[ 2986.412698]  ? create_object.isra.0+0x3a/0xa20
[ 2986.413655]  should_failslab+0x5/0x20
[ 2986.414458]  kmem_cache_alloc+0x5b/0x310
[ 2986.415313]  create_object.isra.0+0x3a/0xa20
[ 2986.416235]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2986.417316]  kmem_cache_alloc_bulk+0x168/0x320
[ 2986.418281]  io_submit_sqes+0x6fe6/0x8610
[ 2986.419161]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2986.420212]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2986.421277]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2986.422290] FAULT_INJECTION: forcing a failure.
[ 2986.422290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2986.422308]  ? find_held_lock+0x2c/0x110
[ 2986.422334]  ? io_submit_sqes+0x8610/0x8610
[ 2986.426169]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2986.427198]  ? wait_for_completion_io+0x270/0x270
[ 2986.428208]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.429191]  ? vfs_write+0x354/0xb10
[ 2986.429974]  ? fput_many+0x2f/0x1a0
[ 2986.430739]  ? ksys_write+0x1a9/0x260
[ 2986.431538]  ? __ia32_sys_read+0xb0/0xb0
[ 2986.432406]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.433523]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.434596]  do_syscall_64+0x33/0x40
[ 2986.435377]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.436442] RIP: 0033:0x7fd7c3eddb19
[ 2986.437224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.441071] RSP: 002b:00007fd7c1453188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2986.442661] RAX: ffffffffffffffda RBX: 00007fd7c3ff0f60 RCX: 00007fd7c3eddb19
[ 2986.444144] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2986.445652] RBP: 00007fd7c14531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.447156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.448655] R13: 00007ffe0a197a8f R14: 00007fd7c1453300 R15: 0000000000022000
[ 2986.450192] CPU: 1 PID: 14761 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 2986.451445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.452964] Call Trace:
[ 2986.453438]  dump_stack+0x107/0x167
[ 2986.454087]  should_fail.cold+0x5/0xa
[ 2986.454780]  strncpy_from_user+0x34/0x470
[ 2986.455529]  getname_flags.part.0+0x95/0x4f0
[ 2986.456323]  getname_flags+0x9a/0xe0
[ 2986.457008]  do_mkdirat+0x8f/0x2b0
[ 2986.457646]  ? user_path_create+0xf0/0xf0
[ 2986.458400]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.459337]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.460259]  do_syscall_64+0x33/0x40
[ 2986.460937]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.461858] RIP: 0033:0x7fd21301bb19
[ 2986.462526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.465545] FAULT_INJECTION: forcing a failure.
[ 2986.465545] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.465811] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2986.465828] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 2986.465837] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2986.465854] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.473263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.474525] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 2986.475820] CPU: 0 PID: 14766 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2986.477304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.479044] Call Trace:
[ 2986.479598]  dump_stack+0x107/0x167
[ 2986.480371]  should_fail.cold+0x5/0xa
[ 2986.481186]  ? create_object.isra.0+0x3a/0xa20
[ 2986.482155]  should_failslab+0x5/0x20
[ 2986.482965]  kmem_cache_alloc+0x5b/0x310
[ 2986.483825]  create_object.isra.0+0x3a/0xa20
[ 2986.484767]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2986.485610] FAULT_INJECTION: forcing a failure.
[ 2986.485610] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.485846]  kmem_cache_alloc_trace+0x151/0x320
[ 2986.485871]  io_uring_alloc_task_context+0x99/0x6a0
[ 2986.485890]  ? io_import_iovec+0x1120/0x1120
[ 2986.485906]  ? find_held_lock+0x2c/0x110
[ 2986.485928]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2986.485949]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2986.485967]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2986.485996]  __do_sys_io_uring_enter+0x146f/0x1890
[ 2986.486017]  ? find_held_lock+0x2c/0x110
[ 2986.486040]  ? io_submit_sqes+0x8610/0x8610
[ 2986.497586]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2986.498607]  ? wait_for_completion_io+0x270/0x270
[ 2986.499629]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.500609]  ? vfs_write+0x354/0xb10
[ 2986.501400]  ? fput_many+0x2f/0x1a0
[ 2986.502165]  ? ksys_write+0x1a9/0x260
[ 2986.502971]  ? __ia32_sys_read+0xb0/0xb0
[ 2986.503830]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.504944]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.506032]  do_syscall_64+0x33/0x40
[ 2986.506816]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.507904] RIP: 0033:0x7f282e625b19
[ 2986.508695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.512590] RSP: 002b:00007f282bb7a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2986.514201] RAX: ffffffffffffffda RBX: 00007f282e739020 RCX: 00007f282e625b19
[ 2986.515702] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2986.517235] RBP: 00007f282bb7a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.518738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.520246] R13: 00007ffe9fdcad8f R14: 00007f282bb7a300 R15: 0000000000022000
[ 2986.521962] CPU: 1 PID: 14760 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 2986.523163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.524598] Call Trace:
[ 2986.525058]  dump_stack+0x107/0x167
[ 2986.525688]  should_fail.cold+0x5/0xa
[ 2986.526359]  ? create_object.isra.0+0x3a/0xa20
[ 2986.527170]  should_failslab+0x5/0x20
[ 2986.527832]  kmem_cache_alloc+0x5b/0x310
[ 2986.528545]  create_object.isra.0+0x3a/0xa20
[ 2986.528581] FAULT_INJECTION: forcing a failure.
[ 2986.528581] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.529315]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2986.529335]  kmem_cache_alloc_bulk+0x168/0x320
[ 2986.529355]  io_submit_sqes+0x6fe6/0x8610
[ 2986.529376]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2986.529403]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2986.529424]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2986.536551]  ? find_held_lock+0x2c/0x110
[ 2986.537256]  ? io_submit_sqes+0x8610/0x8610
[ 2986.538013]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2986.538843]  ? wait_for_completion_io+0x270/0x270
[ 2986.539676]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.540477]  ? vfs_write+0x354/0xb10
[ 2986.541129]  ? fput_many+0x2f/0x1a0
[ 2986.541750]  ? ksys_write+0x1a9/0x260
[ 2986.542407]  ? __ia32_sys_read+0xb0/0xb0
[ 2986.543111]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.544011]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.544901]  do_syscall_64+0x33/0x40
[ 2986.545531]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.546407] RIP: 0033:0x7fbf3f14eb19
[ 2986.547043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.550150] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2986.551417] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 2986.552617] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2986.553805] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.554986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.556161] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
[ 2986.557372] CPU: 0 PID: 14755 Comm: syz-executor.1 Not tainted 5.10.232 #1
[ 2986.558857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.560623] Call Trace:
[ 2986.561178]  dump_stack+0x107/0x167
[ 2986.561945]  should_fail.cold+0x5/0xa
[ 2986.562752]  ? create_object.isra.0+0x3a/0xa20
[ 2986.563718]  should_failslab+0x5/0x20
[ 2986.564519]  kmem_cache_alloc+0x5b/0x310
[ 2986.565387]  create_object.isra.0+0x3a/0xa20
[ 2986.566305]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2986.567374]  kmem_cache_alloc_trace+0x151/0x320
[ 2986.568353]  alloc_pipe_info+0x10a/0x590
[ 2986.569226]  splice_direct_to_actor+0x774/0x980
[ 2986.570200]  ? _cond_resched+0x12/0x80
[ 2986.571021]  ? inode_security+0x107/0x140
[ 2986.571892]  ? pipe_to_sendpage+0x380/0x380
[ 2986.572808]  ? avc_policy_seqno+0x9/0x70
[ 2986.573662]  ? selinux_file_permission+0x92/0x520
[ 2986.574677]  ? do_splice_to+0x160/0x160
[ 2986.575511]  ? security_file_permission+0xb1/0xe0
[ 2986.576531]  do_splice_direct+0x1c4/0x290
[ 2986.577416]  ? splice_direct_to_actor+0x980/0x980
[ 2986.578430]  ? avc_policy_seqno+0x9/0x70
[ 2986.579286]  ? security_file_permission+0xb1/0xe0
[ 2986.580314]  do_sendfile+0x553/0x11e0
[ 2986.581139]  ? do_pwritev+0x270/0x270
[ 2986.581950]  ? wait_for_completion_io+0x270/0x270
[ 2986.582971]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.583946]  ? vfs_write+0x354/0xb10
[ 2986.584740]  __x64_sys_sendfile64+0x1d1/0x210
[ 2986.585681]  ? __ia32_sys_sendfile+0x220/0x220
[ 2986.586648]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.587759]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.588440] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2986.588853]  do_syscall_64+0x33/0x40
[ 2986.588873]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.588891] RIP: 0033:0x7f1ab263bb19
[ 2986.592534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.596444] RSP: 002b:00007f1aafbb1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2986.598052] RAX: ffffffffffffffda RBX: 00007f1ab274ef60 RCX: 00007f1ab263bb19
[ 2986.599554] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004
[ 2986.601067] RBP: 00007f1aafbb11d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.602574] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001
[ 2986.604075] R13: 00007ffe557829ef R14: 00007f1aafbb1300 R15: 0000000000022000
01:57:54 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 2986.634844] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:57:54 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:57:54 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:57:54 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 3)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:57:54 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 2986.781226] FAULT_INJECTION: forcing a failure.
[ 2986.781226] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.783038] CPU: 1 PID: 14783 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2986.784036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.785249] Call Trace:
[ 2986.785622]  dump_stack+0x107/0x167
[ 2986.786152]  should_fail.cold+0x5/0xa
[ 2986.786714]  ? __alloc_skb+0x6d/0x5b0
[ 2986.787271]  should_failslab+0x5/0x20
[ 2986.787821]  kmem_cache_alloc_node+0x55/0x330
[ 2986.788478]  __alloc_skb+0x6d/0x5b0
[ 2986.789026]  netlink_sendmsg+0x998/0xdf0
[ 2986.789615]  ? netlink_unicast+0x7f0/0x7f0
[ 2986.790233]  ? netlink_unicast+0x7f0/0x7f0
[ 2986.790819]  __sock_sendmsg+0x154/0x190
[ 2986.791408]  ____sys_sendmsg+0x70d/0x870
[ 2986.791993]  ? sock_write_iter+0x3d0/0x3d0
[ 2986.792609]  ? do_recvmmsg+0x6d0/0x6d0
[ 2986.793171]  ? lock_downgrade+0x6d0/0x6d0
[ 2986.793770]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2986.794515]  ___sys_sendmsg+0xf3/0x170
[ 2986.795078]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2986.795728]  ? __fget_files+0x2cf/0x520
[ 2986.796294]  ? lock_downgrade+0x6d0/0x6d0
[ 2986.796900]  ? find_held_lock+0x2c/0x110
[ 2986.797481]  ? __fget_files+0x2f8/0x520
[ 2986.798049]  ? __fget_light+0xea/0x290
[ 2986.798618]  __sys_sendmsg+0xe5/0x1b0
[ 2986.799164]  ? __sys_sendmsg_sock+0x40/0x40
[ 2986.799754]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.800438]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.801177]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.801923]  ? trace_hardirqs_on+0x5b/0x180
[ 2986.802516]  do_syscall_64+0x33/0x40
[ 2986.803046]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.803757] RIP: 0033:0x7f40efdc7b19
[ 2986.804286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.806791] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2986.807867] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 2986.808879] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 2986.809885] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.810903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.811914] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 2986.826507] FAULT_INJECTION: forcing a failure.
[ 2986.826507] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.830257] FAULT_INJECTION: forcing a failure.
[ 2986.830257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2986.830271] CPU: 1 PID: 14785 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 2986.830277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.830280] Call Trace:
[ 2986.830295]  dump_stack+0x107/0x167
[ 2986.830309]  should_fail.cold+0x5/0xa
[ 2986.830327]  strncpy_from_user+0x34/0x470
[ 2986.830343]  getname_flags.part.0+0x95/0x4f0
[ 2986.830357]  getname_flags+0x9a/0xe0
[ 2986.830370]  do_mkdirat+0x8f/0x2b0
[ 2986.830383]  ? user_path_create+0xf0/0xf0
[ 2986.830399]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.830411]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.830425]  do_syscall_64+0x33/0x40
[ 2986.830437]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.830445] RIP: 0033:0x7fd21301bb19
[ 2986.830456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.830463] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2986.830476] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 2986.830483] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2986.830490] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.830496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.830503] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 2986.835184] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2986.835751] CPU: 0 PID: 14781 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 2986.863331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.865084] Call Trace:
[ 2986.865643]  dump_stack+0x107/0x167
[ 2986.866419]  should_fail.cold+0x5/0xa
[ 2986.867230]  ? create_object.isra.0+0x3a/0xa20
[ 2986.868200]  should_failslab+0x5/0x20
[ 2986.869019]  kmem_cache_alloc+0x5b/0x310
[ 2986.869883]  ? mark_held_locks+0x9e/0xe0
[ 2986.870733]  create_object.isra.0+0x3a/0xa20
[ 2986.871655]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2986.872747]  kmem_cache_alloc_bulk+0x168/0x320
[ 2986.873719]  io_submit_sqes+0x6fe6/0x8610
[ 2986.874607]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2986.875650]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2986.876704]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2986.877714]  ? find_held_lock+0x2c/0x110
[ 2986.878578]  ? io_submit_sqes+0x8610/0x8610
[ 2986.879497]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2986.880514]  ? wait_for_completion_io+0x270/0x270
[ 2986.881531]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2986.882514]  ? vfs_write+0x354/0xb10
[ 2986.883292]  ? fput_many+0x2f/0x1a0
[ 2986.884057]  ? ksys_write+0x1a9/0x260
[ 2986.884853]  ? __ia32_sys_read+0xb0/0xb0
[ 2986.885706]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2986.886795]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2986.887865]  do_syscall_64+0x33/0x40
[ 2986.888645]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2986.889712] RIP: 0033:0x7fbf3f14eb19
[ 2986.890488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.894346] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2986.895944] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 2986.897442] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2986.898943] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.900437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2986.901949] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
01:57:54 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 2986.917612] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:57:54 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x2, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:57:54 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:57:54 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 4)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 2987.019719] FAULT_INJECTION: forcing a failure.
[ 2987.019719] name failslab, interval 1, probability 0, space 0, times 0
[ 2987.021496] CPU: 1 PID: 14796 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 2987.022304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2987.023255] Call Trace:
[ 2987.023575]  dump_stack+0x107/0x167
[ 2987.024001]  should_fail.cold+0x5/0xa
[ 2987.024448]  ? create_object.isra.0+0x3a/0xa20
[ 2987.024987]  ? create_object.isra.0+0x3a/0xa20
[ 2987.025515]  should_failslab+0x5/0x20
[ 2987.025959]  kmem_cache_alloc+0x5b/0x310
[ 2987.026434]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2987.027052]  create_object.isra.0+0x3a/0xa20
[ 2987.027556]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2987.028148]  kmem_cache_alloc+0x159/0x310
[ 2987.028634]  __d_alloc+0x2a/0x990
[ 2987.029037]  d_alloc+0x46/0x1c0
[ 2987.029423]  __lookup_hash+0xcc/0x190
[ 2987.029868]  filename_create+0x186/0x4a0
[ 2987.030337]  ? filename_parentat+0x570/0x570
[ 2987.030852]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2987.031393]  do_mkdirat+0xa2/0x2b0
[ 2987.031804]  ? user_path_create+0xf0/0xf0
[ 2987.032285]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2987.032894]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2987.033486]  do_syscall_64+0x33/0x40
[ 2987.033911]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2987.034494] RIP: 0033:0x7fd21301bb19
[ 2987.034918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2987.037015] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 2987.037881] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 2987.038690] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 2987.039505] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 2987.040321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2987.041143] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 2987.044405] FAULT_INJECTION: forcing a failure.
[ 2987.044405] name failslab, interval 1, probability 0, space 0, times 0
[ 2987.047043] CPU: 0 PID: 14798 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2987.048447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2987.050148] Call Trace:
[ 2987.050692]  dump_stack+0x107/0x167
[ 2987.051443]  should_fail.cold+0x5/0xa
[ 2987.052218]  ? create_object.isra.0+0x3a/0xa20
[ 2987.053173]  should_failslab+0x5/0x20
[ 2987.053956]  kmem_cache_alloc+0x5b/0x310
[ 2987.054784]  create_object.isra.0+0x3a/0xa20
[ 2987.055689]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2987.056747]  kmem_cache_alloc_node+0x169/0x330
[ 2987.057679]  __alloc_skb+0x6d/0x5b0
[ 2987.058410]  netlink_sendmsg+0x998/0xdf0
[ 2987.059250]  ? netlink_unicast+0x7f0/0x7f0
[ 2987.060116]  ? netlink_unicast+0x7f0/0x7f0
[ 2987.060979]  __sock_sendmsg+0x154/0x190
[ 2987.061781]  ____sys_sendmsg+0x70d/0x870
[ 2987.062615]  ? sock_write_iter+0x3d0/0x3d0
[ 2987.063466]  ? do_recvmmsg+0x6d0/0x6d0
[ 2987.064265]  ? lock_downgrade+0x6d0/0x6d0
[ 2987.065109]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2987.066176]  ___sys_sendmsg+0xf3/0x170
[ 2987.066959]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2987.067879]  ? __fget_files+0x2cf/0x520
[ 2987.068673]  ? lock_downgrade+0x6d0/0x6d0
[ 2987.069511]  ? find_held_lock+0x2c/0x110
[ 2987.070340]  ? __fget_files+0x2f8/0x520
[ 2987.071145]  ? __fget_light+0xea/0x290
[ 2987.071928]  __sys_sendmsg+0xe5/0x1b0
[ 2987.072705]  ? __sys_sendmsg_sock+0x40/0x40
[ 2987.073568]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2987.074511]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2987.075572]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2987.076608]  ? trace_hardirqs_on+0x5b/0x180
[ 2987.077477]  do_syscall_64+0x33/0x40
[ 2987.078229]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2987.079303] RIP: 0033:0x7f40efdc7b19
[ 2987.080076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2987.083921] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2987.085521] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 2987.087010] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 2987.088525] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2987.090022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2987.091514] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 2987.126098] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 2987.132979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:57:54 executing program 2:
r0 = syz_io_uring_setup(0x6c75, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:57:54 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 2987.212410] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:57:54 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

[ 2987.277044] FAULT_INJECTION: forcing a failure.
[ 2987.277044] name failslab, interval 1, probability 0, space 0, times 0
[ 2987.278398] CPU: 1 PID: 14807 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2987.279133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2987.280076] Call Trace:
[ 2987.280384]  dump_stack+0x107/0x167
[ 2987.280807]  should_fail.cold+0x5/0xa
[ 2987.281241]  ? create_object.isra.0+0x3a/0xa20
[ 2987.281763]  should_failslab+0x5/0x20
[ 2987.282196]  kmem_cache_alloc+0x5b/0x310
[ 2987.282667]  create_object.isra.0+0x3a/0xa20
[ 2987.283150]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2987.283752]  kmem_cache_alloc_bulk+0x168/0x320
[ 2987.284259]  io_submit_sqes+0x6fe6/0x8610
[ 2987.284769]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 2987.285319]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 2987.285866]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 2987.286438]  ? find_held_lock+0x2c/0x110
[ 2987.286893]  ? io_submit_sqes+0x8610/0x8610
[ 2987.287379]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2987.287962]  ? wait_for_completion_io+0x270/0x270
[ 2987.288519]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2987.289055]  ? vfs_write+0x354/0xb10
[ 2987.289495]  ? fput_many+0x2f/0x1a0
[ 2987.289927]  ? ksys_write+0x1a9/0x260
[ 2987.290371]  ? __ia32_sys_read+0xb0/0xb0
[ 2987.290836]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2987.291446]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2987.292023]  do_syscall_64+0x33/0x40
[ 2987.292451]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2987.293065] RIP: 0033:0x7f282e625b19
[ 2987.293495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2987.295625] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2987.296474] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 2987.297259] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2987.298038] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2987.298831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2987.299614] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
01:58:09 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:09 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:58:09 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000002)

01:58:09 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:58:09 executing program 2:
r0 = syz_io_uring_setup(0x6c75, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:58:09 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 5)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:58:09 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x4b47, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:58:09 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3002.159668] FAULT_INJECTION: forcing a failure.
[ 3002.159668] name failslab, interval 1, probability 0, space 0, times 0
[ 3002.161414] CPU: 1 PID: 14831 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3002.162338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3002.163439] Call Trace:
[ 3002.163797]  dump_stack+0x107/0x167
[ 3002.164284]  should_fail.cold+0x5/0xa
[ 3002.164622] FAULT_INJECTION: forcing a failure.
[ 3002.164622] name failslab, interval 1, probability 0, space 0, times 0
[ 3002.164792]  ? create_object.isra.0+0x3a/0xa20
[ 3002.164807]  should_failslab+0x5/0x20
[ 3002.164819]  kmem_cache_alloc+0x5b/0x310
[ 3002.164832]  ? mark_held_locks+0x9e/0xe0
[ 3002.164847]  create_object.isra.0+0x3a/0xa20
[ 3002.164857]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3002.164874]  kmem_cache_alloc_bulk+0x168/0x320
[ 3002.164900]  io_submit_sqes+0x6fe6/0x8610
[ 3002.164921]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3002.172483]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3002.173155]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3002.173802]  ? find_held_lock+0x2c/0x110
[ 3002.174337]  ? io_submit_sqes+0x8610/0x8610
[ 3002.174919]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3002.175554]  ? wait_for_completion_io+0x270/0x270
[ 3002.176210]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3002.176817]  ? vfs_write+0x354/0xb10
[ 3002.177317]  ? fput_many+0x2f/0x1a0
[ 3002.177797]  ? ksys_write+0x1a9/0x260
[ 3002.178304]  ? __ia32_sys_read+0xb0/0xb0
[ 3002.178841]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3002.179531]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3002.180224]  do_syscall_64+0x33/0x40
[ 3002.180718]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3002.181398] RIP: 0033:0x7f282e625b19
[ 3002.181892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3002.184335] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3002.185346] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3002.186291] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3002.187236] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3002.188169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3002.189097] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3002.190124] CPU: 0 PID: 14824 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3002.191600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3002.193363] Call Trace:
[ 3002.193924]  dump_stack+0x107/0x167
[ 3002.194690]  should_fail.cold+0x5/0xa
[ 3002.195494]  ? cgroup_mkdir+0x251/0xf50
[ 3002.196337]  should_failslab+0x5/0x20
[ 3002.197153]  __kmalloc+0x72/0x390
[ 3002.197899]  cgroup_mkdir+0x251/0xf50
[ 3002.198704]  ? cgroup_destroy_locked+0x710/0x710
[ 3002.199704]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3002.200581]  vfs_mkdir+0x493/0x750
[ 3002.201354]  do_mkdirat+0x150/0x2b0
[ 3002.202144]  ? user_path_create+0xf0/0xf0
[ 3002.203033]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3002.204141]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3002.205242]  do_syscall_64+0x33/0x40
[ 3002.206027]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3002.207118] RIP: 0033:0x7fd21301bb19
[ 3002.207893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3002.211783] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3002.213402] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3002.214905] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3002.216427] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3002.217942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3002.219448] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3002.232512] FAULT_INJECTION: forcing a failure.
[ 3002.232512] name failslab, interval 1, probability 0, space 0, times 0
[ 3002.235102] CPU: 0 PID: 14828 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3002.236562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3002.238332] Call Trace:
[ 3002.238892]  dump_stack+0x107/0x167
[ 3002.239675]  should_fail.cold+0x5/0xa
[ 3002.240500]  ? create_object.isra.0+0x3a/0xa20
[ 3002.241481]  should_failslab+0x5/0x20
[ 3002.242287]  kmem_cache_alloc+0x5b/0x310
[ 3002.243147]  ? mark_held_locks+0x9e/0xe0
[ 3002.244017]  create_object.isra.0+0x3a/0xa20
[ 3002.244941]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3002.246030]  kmem_cache_alloc_bulk+0x168/0x320
[ 3002.246994]  io_submit_sqes+0x6fe6/0x8610
[ 3002.247888]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3002.248941]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3002.250009]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3002.251027]  ? find_held_lock+0x2c/0x110
[ 3002.251899]  ? io_submit_sqes+0x8610/0x8610
[ 3002.252825]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3002.253343] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3002.253850]  ? wait_for_completion_io+0x270/0x270
[ 3002.253873]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3002.253895]  ? vfs_write+0x354/0xb10
[ 3002.257432]  ? fput_many+0x2f/0x1a0
[ 3002.258208]  ? ksys_write+0x1a9/0x260
[ 3002.259015]  ? __ia32_sys_read+0xb0/0xb0
[ 3002.259877]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3002.260990]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3002.262106]  do_syscall_64+0x33/0x40
[ 3002.262895]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3002.263971] RIP: 0033:0x7fbf3f14eb19
[ 3002.264755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3002.268653] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3002.270268] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 3002.271776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3002.273280] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 3002.274780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3002.276299] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
[ 3002.278490] FAULT_INJECTION: forcing a failure.
[ 3002.278490] name failslab, interval 1, probability 0, space 0, times 0
[ 3002.281094] CPU: 0 PID: 14834 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3002.282561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3002.284315] Call Trace:
[ 3002.284868]  dump_stack+0x107/0x167
[ 3002.285650]  should_fail.cold+0x5/0xa
[ 3002.286467]  should_failslab+0x5/0x20
[ 3002.287283]  __kmalloc_node_track_caller+0x74/0x3b0
[ 3002.288337]  ? netlink_sendmsg+0x998/0xdf0
[ 3002.289248]  __alloc_skb+0xb1/0x5b0
[ 3002.290022]  netlink_sendmsg+0x998/0xdf0
[ 3002.290883]  ? netlink_unicast+0x7f0/0x7f0
[ 3002.291780]  ? netlink_unicast+0x7f0/0x7f0
[ 3002.292673]  __sock_sendmsg+0x154/0x190
[ 3002.293523]  ____sys_sendmsg+0x70d/0x870
[ 3002.294381]  ? sock_write_iter+0x3d0/0x3d0
[ 3002.295273]  ? do_recvmmsg+0x6d0/0x6d0
[ 3002.296106]  ? lock_downgrade+0x6d0/0x6d0
[ 3002.296994]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3002.298120]  ___sys_sendmsg+0xf3/0x170
[ 3002.298944]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3002.299917]  ? __fget_files+0x2cf/0x520
[ 3002.300761]  ? lock_downgrade+0x6d0/0x6d0
[ 3002.301648]  ? find_held_lock+0x2c/0x110
[ 3002.302519]  ? __fget_files+0x2f8/0x520
[ 3002.303366]  ? __fget_light+0xea/0x290
[ 3002.304195]  __sys_sendmsg+0xe5/0x1b0
[ 3002.304999]  ? __sys_sendmsg_sock+0x40/0x40
[ 3002.305929]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3002.306921]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3002.308035]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3002.309126]  ? trace_hardirqs_on+0x5b/0x180
[ 3002.310042]  do_syscall_64+0x33/0x40
[ 3002.310825]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3002.311917] RIP: 0033:0x7f40efdc7b19
[ 3002.312700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3002.316607] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3002.318231] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 3002.319750] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 3002.321276] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3002.322784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3002.324302] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
01:58:10 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x4b49, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3002.360366] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:58:22 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:58:22 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x541b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:58:22 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:22 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:58:22 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:22 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 6)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:58:22 executing program 2:
r0 = syz_io_uring_setup(0x6c75, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:58:22 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000003)

[ 3015.043721] FAULT_INJECTION: forcing a failure.
[ 3015.043721] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.047052] CPU: 1 PID: 14869 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3015.048829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.050970] Call Trace:
[ 3015.051639]  dump_stack+0x107/0x167
[ 3015.052560]  should_fail.cold+0x5/0xa
[ 3015.053524]  ? create_object.isra.0+0x3a/0xa20
[ 3015.054688]  should_failslab+0x5/0x20
[ 3015.055660]  kmem_cache_alloc+0x5b/0x310
[ 3015.056685]  create_object.isra.0+0x3a/0xa20
[ 3015.057821]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3015.059106]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 3015.060379]  ? netlink_sendmsg+0x998/0xdf0
[ 3015.061471]  __alloc_skb+0xb1/0x5b0
[ 3015.062410]  netlink_sendmsg+0x998/0xdf0
[ 3015.063450]  ? netlink_unicast+0x7f0/0x7f0
[ 3015.064535]  ? netlink_unicast+0x7f0/0x7f0
[ 3015.065632]  __sock_sendmsg+0x154/0x190
[ 3015.066650]  ____sys_sendmsg+0x70d/0x870
[ 3015.067688]  ? sock_write_iter+0x3d0/0x3d0
[ 3015.068777]  ? do_recvmmsg+0x6d0/0x6d0
[ 3015.069801]  ? lock_downgrade+0x6d0/0x6d0
[ 3015.070883]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3015.072236]  ___sys_sendmsg+0xf3/0x170
[ 3015.073220]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3015.074375]  ? __fget_files+0x2cf/0x520
[ 3015.075245]  ? lock_downgrade+0x6d0/0x6d0
[ 3015.076123]  ? find_held_lock+0x2c/0x110
[ 3015.076998]  ? __fget_files+0x2f8/0x520
[ 3015.077859]  ? __fget_light+0xea/0x290
[ 3015.078700]  __sys_sendmsg+0xe5/0x1b0
[ 3015.079514]  ? __sys_sendmsg_sock+0x40/0x40
[ 3015.080426]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3015.081425]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.082560]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.083182] FAULT_INJECTION: forcing a failure.
[ 3015.083182] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.083639]  ? trace_hardirqs_on+0x5b/0x180
[ 3015.083660]  do_syscall_64+0x33/0x40
[ 3015.086846]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.087933] RIP: 0033:0x7f40efdc7b19
[ 3015.088718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.092578] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3015.094184] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 3015.095686] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 3015.097174] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.098688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.100179] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 3015.101708] CPU: 0 PID: 14872 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3015.102636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.103726] Call Trace:
[ 3015.104082]  dump_stack+0x107/0x167
[ 3015.104567]  should_fail.cold+0x5/0xa
[ 3015.105082]  ? io_wq_create+0xeb/0xc00
[ 3015.105616]  should_failslab+0x5/0x20
[ 3015.106126]  __kmalloc+0x72/0x390
[ 3015.106590]  io_wq_create+0xeb/0xc00
[ 3015.107091]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 3015.107764]  ? io_import_iovec+0x1120/0x1120
[ 3015.108346]  ? io_apoll_task_func+0x2d0/0x2d0
[ 3015.108937]  ? __io_req_find_next+0x300/0x300
[ 3015.109536]  ? __io_uring_add_tctx_node+0x6e/0x520
[ 3015.110188]  __io_uring_add_tctx_node+0x2c6/0x520
[ 3015.110831]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 3015.111536]  __do_sys_io_uring_enter+0x146f/0x1890
[ 3015.112199]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.112893]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 3015.113487]  ? trace_hardirqs_on+0x5b/0x180
[ 3015.114082]  ? io_submit_sqes+0x8610/0x8610
[ 3015.114646]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 3015.115261]  ? finish_task_switch+0x126/0x5d0
[ 3015.115856]  ? finish_task_switch+0xef/0x5d0
[ 3015.116439]  ? __switch_to+0x572/0xf70
[ 3015.116953]  ? __switch_to_asm+0x3a/0x60
[ 3015.117487]  ? __switch_to_asm+0x34/0x60
[ 3015.118032]  ? __schedule+0x82c/0x1ea0
[ 3015.118549]  ? io_schedule_timeout+0x140/0x140
[ 3015.119150]  ? copy_kernel_to_fpregs+0x9e/0xe0
[ 3015.119748]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 3015.120462]  ? ksys_write+0x1a9/0x260
[ 3015.120964]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.121659]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.122338]  do_syscall_64+0x33/0x40
[ 3015.122836]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.123503] RIP: 0033:0x7fbf3f14eb19
[ 3015.123988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.126422] RSP: 002b:00007fbf3c6a3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3015.127419] RAX: ffffffffffffffda RBX: 00007fbf3f262020 RCX: 00007fbf3f14eb19
[ 3015.128354] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3015.129286] RBP: 00007fbf3c6a31d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.130225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.131156] R13: 00007ffd7cd726bf R14: 00007fbf3c6a3300 R15: 0000000000022000
[ 3015.138697] FAULT_INJECTION: forcing a failure.
[ 3015.138697] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.140465] CPU: 0 PID: 14877 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3015.141361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.142440] Call Trace:
[ 3015.142781]  dump_stack+0x107/0x167
[ 3015.143255]  should_fail.cold+0x5/0xa
[ 3015.143748]  ? create_object.isra.0+0x3a/0xa20
[ 3015.144341]  should_failslab+0x5/0x20
[ 3015.144836]  kmem_cache_alloc+0x5b/0x310
[ 3015.145364]  create_object.isra.0+0x3a/0xa20
[ 3015.145947]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3015.146619]  kmem_cache_alloc+0x159/0x310
[ 3015.147170]  ? ext4_init_journal_params+0x350/0x350
[ 3015.147825]  ext4_alloc_inode+0x1a/0x670
[ 3015.148367]  ? ext4_init_journal_params+0x350/0x350
[ 3015.149031]  alloc_inode+0x63/0x240
[ 3015.149508]  new_inode+0x23/0x250
[ 3015.149969]  __ext4_new_inode+0x32c/0x5370
[ 3015.150521]  ? avc_has_extended_perms+0xf40/0xf40
[ 3015.151162]  ? ext4_mark_inode_used+0x14b0/0x14b0
[ 3015.151792]  ? dquot_initialize_needed+0x290/0x290
[ 3015.152457]  ? selinux_determine_inode_label+0x1ab/0x340
[ 3015.153179]  ext4_mkdir+0x32c/0xb10
[ 3015.153670]  ? ext4_rmdir+0xf70/0xf70
[ 3015.154194]  vfs_mkdir+0x493/0x750
[ 3015.154679]  do_mkdirat+0x150/0x2b0
[ 3015.155188]  ? user_path_create+0xf0/0xf0
[ 3015.155738]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.156434]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.157130]  do_syscall_64+0x33/0x40
[ 3015.157632]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.158324] RIP: 0033:0x7fd21301bb19
[ 3015.158822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.161247] RSP: 002b:00007fd210570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3015.162282] RAX: ffffffffffffffda RBX: 00007fd21312f020 RCX: 00007fd21301bb19
[ 3015.163241] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000004
[ 3015.164209] RBP: 00007fd2105701d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.165174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.166117] R13: 00007ffd7583d62f R14: 00007fd210570300 R15: 0000000000022000
[ 3015.186253] FAULT_INJECTION: forcing a failure.
[ 3015.186253] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.189048] CPU: 1 PID: 14879 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3015.190550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.192355] Call Trace:
[ 3015.192922]  dump_stack+0x107/0x167
[ 3015.193694]  should_fail.cold+0x5/0xa
[ 3015.194484]  ? create_object.isra.0+0x3a/0xa20
[ 3015.195469]  should_failslab+0x5/0x20
[ 3015.196284]  kmem_cache_alloc+0x5b/0x310
[ 3015.197141]  ? mark_held_locks+0x9e/0xe0
[ 3015.198013]  create_object.isra.0+0x3a/0xa20
[ 3015.198946]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3015.200023]  kmem_cache_alloc_bulk+0x168/0x320
[ 3015.200991]  io_submit_sqes+0x6fe6/0x8610
[ 3015.201882]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3015.202929]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3015.203977]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3015.205008]  ? find_held_lock+0x2c/0x110
[ 3015.205882]  ? io_submit_sqes+0x8610/0x8610
[ 3015.206805]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3015.207836]  ? wait_for_completion_io+0x270/0x270
[ 3015.208861]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3015.209859]  ? vfs_write+0x354/0xb10
[ 3015.210642]  ? fput_many+0x2f/0x1a0
[ 3015.211405]  ? ksys_write+0x1a9/0x260
[ 3015.212215]  ? __ia32_sys_read+0xb0/0xb0
[ 3015.213076]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.214190]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.215292]  do_syscall_64+0x33/0x40
[ 3015.215955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3015.216087]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.216101] RIP: 0033:0x7f282e625b19
[ 3015.216122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.223276] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3015.224983] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3015.226592] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3015.228215] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.229845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.231466] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3015.237058] tmpfs: Unknown parameter 'ÿÿ00000000000000000000004ÿÿÿÿ18446744073709551615'
01:58:22 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 7)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:58:22 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3015.288081] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:58:22 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:23 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:58:23 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:23 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x5421, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3015.451427] FAULT_INJECTION: forcing a failure.
[ 3015.451427] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.454094] CPU: 1 PID: 14900 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3015.455559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.457322] Call Trace:
[ 3015.457894]  dump_stack+0x107/0x167
[ 3015.458662]  should_fail.cold+0x5/0xa
[ 3015.459483]  ? create_object.isra.0+0x3a/0xa20
[ 3015.460470]  should_failslab+0x5/0x20
[ 3015.461273]  kmem_cache_alloc+0x5b/0x310
[ 3015.462153]  create_object.isra.0+0x3a/0xa20
[ 3015.463109]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3015.464196]  __kmalloc+0x16e/0x390
[ 3015.464964]  cgroup_mkdir+0x251/0xf50
[ 3015.465789]  ? cgroup_destroy_locked+0x710/0x710
[ 3015.466258] FAULT_INJECTION: forcing a failure.
[ 3015.466258] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.466795]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3015.466817]  vfs_mkdir+0x493/0x750
[ 3015.466839]  do_mkdirat+0x150/0x2b0
[ 3015.470515]  ? user_path_create+0xf0/0xf0
[ 3015.471403]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.472522]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.473618]  do_syscall_64+0x33/0x40
[ 3015.474407]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.475496] RIP: 0033:0x7fd21301bb19
[ 3015.476285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.480191] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3015.481823] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3015.483347] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3015.484858] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.486376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.487911] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3015.489449] CPU: 0 PID: 14904 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3015.490267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.491230] Call Trace:
[ 3015.491547]  dump_stack+0x107/0x167
[ 3015.491964]  should_fail.cold+0x5/0xa
[ 3015.492414]  ? create_object.isra.0+0x3a/0xa20
[ 3015.492943]  should_failslab+0x5/0x20
[ 3015.493383]  kmem_cache_alloc+0x5b/0x310
[ 3015.493851]  ? mark_held_locks+0x9e/0xe0
[ 3015.494308]  create_object.isra.0+0x3a/0xa20
[ 3015.494805]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3015.495384]  kmem_cache_alloc_bulk+0x168/0x320
[ 3015.495905]  io_submit_sqes+0x6fe6/0x8610
[ 3015.496376]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3015.496943]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3015.497509]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3015.498079]  ? find_held_lock+0x2c/0x110
[ 3015.498550]  ? io_submit_sqes+0x8610/0x8610
[ 3015.499052]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3015.499595]  ? wait_for_completion_io+0x270/0x270
[ 3015.500154]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3015.500689]  ? vfs_write+0x354/0xb10
[ 3015.501119]  ? fput_many+0x2f/0x1a0
[ 3015.501534]  ? ksys_write+0x1a9/0x260
[ 3015.501980]  ? __ia32_sys_read+0xb0/0xb0
[ 3015.502445]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.503036]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.503629]  do_syscall_64+0x33/0x40
[ 3015.504064]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.504654] RIP: 0033:0x7fbf3f14eb19
[ 3015.505082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.507178] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3015.508035] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 3015.508857] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3015.509685] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.510495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.511317] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
[ 3015.578430] FAULT_INJECTION: forcing a failure.
[ 3015.578430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3015.579838] CPU: 0 PID: 14911 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3015.580630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.581586] Call Trace:
[ 3015.581887]  dump_stack+0x107/0x167
[ 3015.582306]  should_fail.cold+0x5/0xa
[ 3015.582745]  _copy_from_iter_full+0x201/0xa60
[ 3015.583265]  ? __virt_addr_valid+0x170/0x5d0
[ 3015.583767]  ? __check_object_size+0x319/0x440
[ 3015.584291]  netlink_sendmsg+0x879/0xdf0
[ 3015.584763]  ? netlink_unicast+0x7f0/0x7f0
[ 3015.585257]  ? netlink_unicast+0x7f0/0x7f0
[ 3015.585757]  __sock_sendmsg+0x154/0x190
[ 3015.586209]  ____sys_sendmsg+0x70d/0x870
[ 3015.586673]  ? sock_write_iter+0x3d0/0x3d0
[ 3015.587153]  ? do_recvmmsg+0x6d0/0x6d0
[ 3015.587594]  ? lock_downgrade+0x6d0/0x6d0
[ 3015.588073]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3015.588674]  ___sys_sendmsg+0xf3/0x170
[ 3015.589118]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3015.589650]  ? __fget_files+0x2cf/0x520
[ 3015.590099]  ? lock_downgrade+0x6d0/0x6d0
[ 3015.590576]  ? find_held_lock+0x2c/0x110
[ 3015.591046]  ? __fget_files+0x2f8/0x520
[ 3015.591506]  ? __fget_light+0xea/0x290
[ 3015.591953]  __sys_sendmsg+0xe5/0x1b0
[ 3015.592383]  ? __sys_sendmsg_sock+0x40/0x40
[ 3015.592880]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3015.593413]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3015.594015]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3015.594600]  ? trace_hardirqs_on+0x5b/0x180
[ 3015.595096]  do_syscall_64+0x33/0x40
[ 3015.595517]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3015.596100] RIP: 0033:0x7f40efdc7b19
[ 3015.596522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.598613] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3015.599480] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 3015.600290] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 3015.601105] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.601919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3015.602729] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 3015.671252] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3015.686279] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:58:35 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000004)

01:58:35 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r2 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

01:58:35 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:58:35 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:35 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x5450, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:58:35 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:58:35 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 8)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:58:35 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3027.943500] FAULT_INJECTION: forcing a failure.
[ 3027.943500] name failslab, interval 1, probability 0, space 0, times 0
[ 3027.946196] CPU: 0 PID: 14930 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3027.946231] FAULT_INJECTION: forcing a failure.
[ 3027.946231] name failslab, interval 1, probability 0, space 0, times 0
[ 3027.947682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3027.947688] Call Trace:
[ 3027.947713]  dump_stack+0x107/0x167
[ 3027.947734]  should_fail.cold+0x5/0xa
[ 3027.947757]  ? __alloc_skb+0x6d/0x5b0
[ 3027.953878]  should_failslab+0x5/0x20
[ 3027.954696]  kmem_cache_alloc_node+0x55/0x330
[ 3027.955678]  __alloc_skb+0x6d/0x5b0
[ 3027.956475]  netlink_dump+0x729/0x1060
[ 3027.957309]  ? netlink_deliver_tap+0xcc0/0xcc0
[ 3027.958307]  ? lock_downgrade+0x6d0/0x6d0
[ 3027.959203]  __netlink_dump_start+0x627/0x8d0
[ 3027.960173]  rtnetlink_rcv_msg+0x749/0xbb0
[ 3027.961076]  ? qdisc_notify.isra.0+0x310/0x310
[ 3027.962059]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3027.962927]  ? qdisc_notify.isra.0+0x310/0x310
[ 3027.963904]  ? lock_acquire+0x197/0x470
[ 3027.964754]  ? netlink_deliver_tap+0xf4/0xcc0
[ 3027.965704]  netlink_rcv_skb+0x14b/0x430
[ 3027.966586]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3027.967461]  ? netlink_ack+0xab0/0xab0
[ 3027.968284]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 3027.969246]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 3027.970217]  ? is_vmalloc_addr+0x7b/0xb0
[ 3027.971079]  netlink_unicast+0x549/0x7f0
[ 3027.971945]  ? netlink_attachskb+0x870/0x870
[ 3027.972892]  netlink_sendmsg+0x90f/0xdf0
[ 3027.973761]  ? netlink_unicast+0x7f0/0x7f0
[ 3027.974667]  ? netlink_unicast+0x7f0/0x7f0
[ 3027.975563]  __sock_sendmsg+0x154/0x190
[ 3027.976399]  ____sys_sendmsg+0x70d/0x870
[ 3027.977262]  ? sock_write_iter+0x3d0/0x3d0
[ 3027.978172]  ? do_recvmmsg+0x6d0/0x6d0
[ 3027.979012]  ? lock_downgrade+0x6d0/0x6d0
[ 3027.979905]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3027.981186]  ___sys_sendmsg+0xf3/0x170
[ 3027.982170]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3027.983329]  ? __fget_files+0x2cf/0x520
[ 3027.984329]  ? lock_downgrade+0x6d0/0x6d0
[ 3027.985378]  ? find_held_lock+0x2c/0x110
[ 3027.986413]  ? __fget_files+0x2f8/0x520
[ 3027.987420]  ? __fget_light+0xea/0x290
[ 3027.988400]  __sys_sendmsg+0xe5/0x1b0
[ 3027.989348]  ? __sys_sendmsg_sock+0x40/0x40
[ 3027.990440]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3027.991614]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3027.992933]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3027.994219]  ? trace_hardirqs_on+0x5b/0x180
[ 3027.995293]  do_syscall_64+0x33/0x40
[ 3027.996220]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3027.997488] RIP: 0033:0x7f40efdc7b19
[ 3027.998422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.003016] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3028.004911] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 3028.006690] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 3028.008462] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.010243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.012005] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 3028.013777] CPU: 1 PID: 14929 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3028.014650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.015666] Call Trace:
[ 3028.016004]  dump_stack+0x107/0x167
[ 3028.016446]  should_fail.cold+0x5/0xa
[ 3028.016916]  ? create_object.isra.0+0x3a/0xa20
[ 3028.017452]  should_failslab+0x5/0x20
[ 3028.017917]  kmem_cache_alloc+0x5b/0x310
[ 3028.018396]  ? mark_held_locks+0x9e/0xe0
[ 3028.018872]  create_object.isra.0+0x3a/0xa20
[ 3028.019380]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3028.019976]  kmem_cache_alloc_bulk+0x168/0x320
[ 3028.020511]  io_submit_sqes+0x6fe6/0x8610
[ 3028.020997]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3028.021601]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.022187]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.022780]  ? find_held_lock+0x2c/0x110
[ 3028.023272]  ? io_submit_sqes+0x8610/0x8610
[ 3028.023807]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3028.024395]  ? wait_for_completion_io+0x270/0x270
[ 3028.024981]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3028.025540]  ? vfs_write+0x354/0xb10
[ 3028.025990]  ? fput_many+0x2f/0x1a0
[ 3028.026446]  ? ksys_write+0x1a9/0x260
[ 3028.026908]  ? __ia32_sys_read+0xb0/0xb0
[ 3028.027406]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.028046]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.028676]  do_syscall_64+0x33/0x40
[ 3028.029127]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.029743] RIP: 0033:0x7f282e625b19
[ 3028.030203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.032441] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3028.033373] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3028.034221] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3028.035048] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.035872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.036728] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3028.056911] FAULT_INJECTION: forcing a failure.
[ 3028.056911] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.058369] CPU: 1 PID: 14937 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3028.059176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.060199] Call Trace:
[ 3028.060535]  dump_stack+0x107/0x167
[ 3028.060973]  should_fail.cold+0x5/0xa
[ 3028.061438]  ? create_object.isra.0+0x3a/0xa20
[ 3028.061988]  should_failslab+0x5/0x20
[ 3028.062479]  kmem_cache_alloc+0x5b/0x310
[ 3028.062759] FAULT_INJECTION: forcing a failure.
[ 3028.062759] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.064280]  ? mark_held_locks+0x9e/0xe0
[ 3028.064305]  create_object.isra.0+0x3a/0xa20
[ 3028.064323]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3028.064348]  kmem_cache_alloc_bulk+0x168/0x320
[ 3028.064368]  io_submit_sqes+0x6fe6/0x8610
[ 3028.064383]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3028.064409]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.068741]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.069325]  ? find_held_lock+0x2c/0x110
[ 3028.069810]  ? io_submit_sqes+0x8610/0x8610
[ 3028.070340]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3028.070924]  ? wait_for_completion_io+0x270/0x270
[ 3028.071510]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3028.072070]  ? vfs_write+0x354/0xb10
[ 3028.072513]  ? fput_many+0x2f/0x1a0
[ 3028.072947]  ? ksys_write+0x1a9/0x260
[ 3028.073404]  ? __ia32_sys_read+0xb0/0xb0
[ 3028.073894]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.074533]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.075127]  do_syscall_64+0x33/0x40
[ 3028.075551]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.076170] RIP: 0033:0x7fbf3f14eb19
[ 3028.076612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.078819] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3028.079678] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 3028.080495] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3028.081310] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.082127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.082943] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
[ 3028.083810] CPU: 0 PID: 14938 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3028.085454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.087410] Call Trace:
[ 3028.088036]  dump_stack+0x107/0x167
[ 3028.088900]  should_fail.cold+0x5/0xa
[ 3028.089800]  ? create_object.isra.0+0x3a/0xa20
[ 3028.090892]  should_failslab+0x5/0x20
[ 3028.091790]  kmem_cache_alloc+0x5b/0x310
[ 3028.092754]  create_object.isra.0+0x3a/0xa20
[ 3028.094033]  kmemleak_alloc_percpu+0xa0/0x100
[ 3028.095096]  pcpu_alloc+0x4e2/0x1240
[ 3028.095992]  ? cset_cgroup_from_root+0x220/0x220
[ 3028.097110]  percpu_ref_init+0x31/0x3d0
[ 3028.098064]  cgroup_mkdir+0x288/0xf50
[ 3028.098962]  ? cgroup_destroy_locked+0x710/0x710
[ 3028.100073]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3028.101040]  vfs_mkdir+0x493/0x750
[ 3028.101873]  do_mkdirat+0x150/0x2b0
[ 3028.102729]  ? user_path_create+0xf0/0xf0
[ 3028.103702]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.104930]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.106144]  do_syscall_64+0x33/0x40
[ 3028.107012]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.108204] RIP: 0033:0x7fd21301bb19
[ 3028.109070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.113308] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3028.115066] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3028.116683] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3028.118319] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.119947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.121563] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3028.147356] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:58:35 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 9)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:58:35 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r2 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

[ 3028.214371] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3028.216093] FAULT_INJECTION: forcing a failure.
[ 3028.216093] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.217405] CPU: 1 PID: 14951 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3028.218241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.219229] Call Trace:
[ 3028.219542]  dump_stack+0x107/0x167
[ 3028.219977]  should_fail.cold+0x5/0xa
[ 3028.220445]  ? create_object.isra.0+0x3a/0xa20
[ 3028.220968]  should_failslab+0x5/0x20
[ 3028.221413]  kmem_cache_alloc+0x5b/0x310
[ 3028.221899]  create_object.isra.0+0x3a/0xa20
[ 3028.222406]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3028.222982]  kmem_cache_alloc_node+0x169/0x330
[ 3028.223504]  __alloc_skb+0x6d/0x5b0
[ 3028.223924]  netlink_dump+0x729/0x1060
[ 3028.224365]  ? netlink_deliver_tap+0xcc0/0xcc0
[ 3028.224892]  ? lock_downgrade+0x6d0/0x6d0
[ 3028.225363]  __netlink_dump_start+0x627/0x8d0
[ 3028.225891]  rtnetlink_rcv_msg+0x749/0xbb0
[ 3028.226382]  ? qdisc_notify.isra.0+0x310/0x310
[ 3028.226920]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3028.227406]  ? qdisc_notify.isra.0+0x310/0x310
[ 3028.227959]  ? lock_acquire+0x197/0x470
[ 3028.228419]  ? netlink_deliver_tap+0xf4/0xcc0
[ 3028.228955]  netlink_rcv_skb+0x14b/0x430
[ 3028.229415]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3028.229897]  ? netlink_ack+0xab0/0xab0
[ 3028.230352]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 3028.230902]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 3028.231440]  ? is_vmalloc_addr+0x7b/0xb0
[ 3028.231919]  netlink_unicast+0x549/0x7f0
[ 3028.232402]  ? netlink_attachskb+0x870/0x870
[ 3028.232934]  netlink_sendmsg+0x90f/0xdf0
[ 3028.233540]  ? netlink_unicast+0x7f0/0x7f0
[ 3028.234059]  ? netlink_unicast+0x7f0/0x7f0
[ 3028.234561]  __sock_sendmsg+0x154/0x190
[ 3028.235024]  ____sys_sendmsg+0x70d/0x870
[ 3028.235492]  ? sock_write_iter+0x3d0/0x3d0
[ 3028.235978]  ? do_recvmmsg+0x6d0/0x6d0
[ 3028.236423]  ? lock_downgrade+0x6d0/0x6d0
[ 3028.236893]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3028.237487]  ___sys_sendmsg+0xf3/0x170
[ 3028.237930]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3028.238460]  ? __fget_files+0x2cf/0x520
[ 3028.238915]  ? lock_downgrade+0x6d0/0x6d0
[ 3028.239387]  ? find_held_lock+0x2c/0x110
[ 3028.239885]  ? __fget_files+0x2f8/0x520
[ 3028.240344]  ? __fget_light+0xea/0x290
[ 3028.240796]  __sys_sendmsg+0xe5/0x1b0
[ 3028.241249]  ? __sys_sendmsg_sock+0x40/0x40
[ 3028.241741]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3028.242283]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.242880]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.243464]  ? trace_hardirqs_on+0x5b/0x180
[ 3028.243980]  do_syscall_64+0x33/0x40
[ 3028.244421]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.245034] RIP: 0033:0x7f40efdc7b19
[ 3028.245478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.247673] RSP: 002b:00007f40ed31c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3028.248585] RAX: ffffffffffffffda RBX: 00007f40efedb020 RCX: 00007f40efdc7b19
[ 3028.249433] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[ 3028.250278] RBP: 00007f40ed31c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.251154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.251995] R13: 00007ffc5b717a9f R14: 00007f40ed31c300 R15: 0000000000022000
01:58:35 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:58:35 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:58:36 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r2 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

[ 3028.341273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3028.349750] FAULT_INJECTION: forcing a failure.
[ 3028.349750] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.351318] CPU: 1 PID: 14958 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3028.352111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.353100] Call Trace:
[ 3028.353416]  dump_stack+0x107/0x167
[ 3028.353839]  should_fail.cold+0x5/0xa
[ 3028.354315]  ? percpu_ref_init+0xd8/0x3d0
[ 3028.354812]  should_failslab+0x5/0x20
[ 3028.355267]  kmem_cache_alloc_trace+0x55/0x320
[ 3028.355815]  ? cset_cgroup_from_root+0x220/0x220
[ 3028.356374]  percpu_ref_init+0xd8/0x3d0
[ 3028.356852]  cgroup_mkdir+0x288/0xf50
[ 3028.357307]  ? cgroup_destroy_locked+0x710/0x710
[ 3028.357863]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3028.358368]  vfs_mkdir+0x493/0x750
[ 3028.358795]  do_mkdirat+0x150/0x2b0
[ 3028.359232]  ? user_path_create+0xf0/0xf0
[ 3028.359725]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.360350]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.360963]  do_syscall_64+0x33/0x40
[ 3028.361400]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.362006] RIP: 0033:0x7fd21301bb19
[ 3028.362451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.364567] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3028.365477] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3028.366337] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3028.367186] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.368034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3028.368888] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
01:58:36 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000005)

[ 3028.393606] FAULT_INJECTION: forcing a failure.
[ 3028.393606] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.395032] CPU: 1 PID: 14960 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3028.395820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.396761] Call Trace:
[ 3028.397071]  dump_stack+0x107/0x167
[ 3028.397485]  should_fail.cold+0x5/0xa
[ 3028.397924]  ? create_object.isra.0+0x3a/0xa20
[ 3028.398453]  should_failslab+0x5/0x20
[ 3028.398888]  kmem_cache_alloc+0x5b/0x310
[ 3028.399353]  ? mark_held_locks+0x9e/0xe0
[ 3028.399818]  create_object.isra.0+0x3a/0xa20
[ 3028.400319]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3028.400929]  kmem_cache_alloc_bulk+0x168/0x320
[ 3028.401485]  io_submit_sqes+0x6fe6/0x8610
[ 3028.401991]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3028.402588]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.403186]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.403756]  ? find_held_lock+0x2c/0x110
[ 3028.404246]  ? io_submit_sqes+0x8610/0x8610
[ 3028.404766]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3028.405332]  ? wait_for_completion_io+0x270/0x270
[ 3028.405885]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3028.406424]  ? vfs_write+0x354/0xb10
[ 3028.406865]  ? fput_many+0x2f/0x1a0
[ 3028.407296]  ? ksys_write+0x1a9/0x260
[ 3028.407750]  ? __ia32_sys_read+0xb0/0xb0
[ 3028.408228]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.408851]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.409457]  do_syscall_64+0x33/0x40
[ 3028.409878]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.410495] RIP: 0033:0x7f282e625b19
[ 3028.410941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.413142] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3028.414043] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3028.414892] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3028.415753] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.416594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.417416] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
01:58:36 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 10)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3028.448507] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3028.470128] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3028.515320] FAULT_INJECTION: forcing a failure.
[ 3028.515320] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.516800] CPU: 1 PID: 14972 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3028.517613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.518611] Call Trace:
[ 3028.518927]  dump_stack+0x107/0x167
[ 3028.519347]  should_fail.cold+0x5/0xa
[ 3028.519794]  should_failslab+0x5/0x20
[ 3028.520253]  __kmalloc_node_track_caller+0x74/0x3b0
[ 3028.520850]  ? netlink_dump+0x729/0x1060
[ 3028.521326]  __alloc_skb+0xb1/0x5b0
[ 3028.521754]  netlink_dump+0x729/0x1060
[ 3028.522219]  ? netlink_deliver_tap+0xcc0/0xcc0
[ 3028.522744]  ? lock_downgrade+0x6d0/0x6d0
[ 3028.523253]  __netlink_dump_start+0x627/0x8d0
[ 3028.523790]  rtnetlink_rcv_msg+0x749/0xbb0
[ 3028.524301]  ? qdisc_notify.isra.0+0x310/0x310
[ 3028.524844]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3028.525324]  ? qdisc_notify.isra.0+0x310/0x310
[ 3028.525863]  ? lock_acquire+0x197/0x470
[ 3028.526364]  ? netlink_deliver_tap+0xf4/0xcc0
[ 3028.526894]  netlink_rcv_skb+0x14b/0x430
[ 3028.527359]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3028.527823]  ? netlink_ack+0xab0/0xab0
[ 3028.528261]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 3028.528781]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 3028.529304]  ? is_vmalloc_addr+0x7b/0xb0
[ 3028.529769]  netlink_unicast+0x549/0x7f0
[ 3028.530240]  ? netlink_attachskb+0x870/0x870
[ 3028.530749]  netlink_sendmsg+0x90f/0xdf0
[ 3028.531214]  ? netlink_unicast+0x7f0/0x7f0
[ 3028.531698]  ? netlink_unicast+0x7f0/0x7f0
[ 3028.532177]  __sock_sendmsg+0x154/0x190
[ 3028.532627]  ____sys_sendmsg+0x70d/0x870
[ 3028.533090]  ? sock_write_iter+0x3d0/0x3d0
[ 3028.533567]  ? do_recvmmsg+0x6d0/0x6d0
[ 3028.534013]  ? lock_downgrade+0x6d0/0x6d0
[ 3028.534494]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3028.535092]  ___sys_sendmsg+0xf3/0x170
[ 3028.535545]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3028.536064]  ? __fget_files+0x2cf/0x520
[ 3028.536521]  ? lock_downgrade+0x6d0/0x6d0
[ 3028.536993]  ? find_held_lock+0x2c/0x110
[ 3028.537458]  ? __fget_files+0x2f8/0x520
[ 3028.537916]  ? __fget_light+0xea/0x290
[ 3028.538375]  __sys_sendmsg+0xe5/0x1b0
[ 3028.538810]  ? __sys_sendmsg_sock+0x40/0x40
[ 3028.539306]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3028.539842]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.540438]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.541022]  ? trace_hardirqs_on+0x5b/0x180
[ 3028.541514]  do_syscall_64+0x33/0x40
[ 3028.541939]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.542531] RIP: 0033:0x7f40efdc7b19
[ 3028.542954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.545032] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3028.545893] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 3028.546708] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 3028.547516] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.548338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3028.549143] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
01:58:36 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:36 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r2 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

[ 3028.690270] FAULT_INJECTION: forcing a failure.
[ 3028.690270] name failslab, interval 1, probability 0, space 0, times 0
[ 3028.693164] CPU: 0 PID: 14978 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3028.694722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3028.696579] Call Trace:
[ 3028.697183]  dump_stack+0x107/0x167
[ 3028.698008]  should_fail.cold+0x5/0xa
[ 3028.698873]  ? create_object.isra.0+0x3a/0xa20
[ 3028.699910]  should_failslab+0x5/0x20
[ 3028.700776]  kmem_cache_alloc+0x5b/0x310
[ 3028.701692]  ? mark_held_locks+0x9e/0xe0
[ 3028.702624]  create_object.isra.0+0x3a/0xa20
[ 3028.703605]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3028.704750]  kmem_cache_alloc_bulk+0x168/0x320
[ 3028.705773]  io_submit_sqes+0x6fe6/0x8610
[ 3028.706720]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3028.707835]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.708960]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3028.710071]  ? find_held_lock+0x2c/0x110
[ 3028.711007]  ? io_submit_sqes+0x8610/0x8610
[ 3028.711979]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3028.713068]  ? wait_for_completion_io+0x270/0x270
[ 3028.714173]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3028.715211]  ? vfs_write+0x354/0xb10
[ 3028.716042]  ? fput_many+0x2f/0x1a0
[ 3028.716868]  ? ksys_write+0x1a9/0x260
[ 3028.717731]  ? __ia32_sys_read+0xb0/0xb0
[ 3028.718659]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3028.719839]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3028.721007]  do_syscall_64+0x33/0x40
[ 3028.721850]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3028.723013] RIP: 0033:0x7fbf3f14eb19
[ 3028.723843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3028.728035] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3028.729754] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 3028.731402] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3028.733011] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 3028.734646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3028.736258] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
01:58:50 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:58:50 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:50 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:58:50 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r2 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

01:58:50 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:58:50 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 11)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:58:50 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x5451, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:58:50 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000000f)

[ 3042.611345] FAULT_INJECTION: forcing a failure.
[ 3042.611345] name failslab, interval 1, probability 0, space 0, times 0
[ 3042.613069] FAULT_INJECTION: forcing a failure.
[ 3042.613069] name failslab, interval 1, probability 0, space 0, times 0
[ 3042.614299] CPU: 1 PID: 14998 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3042.616892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3042.619043] Call Trace:
[ 3042.619602]  dump_stack+0x107/0x167
[ 3042.620355]  should_fail.cold+0x5/0xa
[ 3042.621151]  ? create_object.isra.0+0x3a/0xa20
[ 3042.622349]  should_failslab+0x5/0x20
[ 3042.623323]  kmem_cache_alloc+0x5b/0x310
[ 3042.624195]  create_object.isra.0+0x3a/0xa20
[ 3042.625090]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3042.626203]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 3042.627286]  ? netlink_dump+0x729/0x1060
[ 3042.628123]  __alloc_skb+0xb1/0x5b0
[ 3042.629083]  netlink_dump+0x729/0x1060
[ 3042.629977]  ? netlink_deliver_tap+0xcc0/0xcc0
[ 3042.630948]  ? lock_downgrade+0x6d0/0x6d0
[ 3042.632035]  __netlink_dump_start+0x627/0x8d0
[ 3042.632977]  rtnetlink_rcv_msg+0x749/0xbb0
[ 3042.634073]  ? qdisc_notify.isra.0+0x310/0x310
[ 3042.635270]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3042.636212]  ? qdisc_notify.isra.0+0x310/0x310
[ 3042.637289]  ? lock_acquire+0x197/0x470
[ 3042.638121]  ? netlink_deliver_tap+0xf4/0xcc0
[ 3042.639323]  netlink_rcv_skb+0x14b/0x430
[ 3042.640173]  ? rtnl_fdb_dump+0x9d0/0x9d0
[ 3042.641029]  ? netlink_ack+0xab0/0xab0
[ 3042.641942]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 3042.643091]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 3042.644081]  ? is_vmalloc_addr+0x7b/0xb0
[ 3042.645149]  netlink_unicast+0x549/0x7f0
[ 3042.646000]  ? netlink_attachskb+0x870/0x870
[ 3042.647160]  netlink_sendmsg+0x90f/0xdf0
[ 3042.648072]  ? netlink_unicast+0x7f0/0x7f0
[ 3042.648967]  ? netlink_unicast+0x7f0/0x7f0
[ 3042.649829]  __sock_sendmsg+0x154/0x190
[ 3042.650658]  ____sys_sendmsg+0x70d/0x870
[ 3042.651507]  ? sock_write_iter+0x3d0/0x3d0
[ 3042.652373]  ? do_recvmmsg+0x6d0/0x6d0
[ 3042.653204]  ? lock_downgrade+0x6d0/0x6d0
[ 3042.654139]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3042.655243]  ___sys_sendmsg+0xf3/0x170
[ 3042.656274]  ? sendmsg_copy_msghdr+0x160/0x160
[ 3042.657253]  ? __fget_files+0x2cf/0x520
[ 3042.658288]  ? lock_downgrade+0x6d0/0x6d0
[ 3042.659227]  ? find_held_lock+0x2c/0x110
[ 3042.660315]  ? __fget_files+0x2f8/0x520
[ 3042.661377]  ? __fget_light+0xea/0x290
[ 3042.662229]  __sys_sendmsg+0xe5/0x1b0
[ 3042.663039]  ? __sys_sendmsg_sock+0x40/0x40
[ 3042.664162]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3042.665204]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3042.666272]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3042.667637]  ? trace_hardirqs_on+0x5b/0x180
[ 3042.668539]  do_syscall_64+0x33/0x40
[ 3042.669492]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3042.670738] RIP: 0033:0x7f40efdc7b19
[ 3042.671510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3042.676296] RSP: 002b:00007f40ed33d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3042.678283] RAX: ffffffffffffffda RBX: 00007f40efedaf60 RCX: 00007f40efdc7b19
[ 3042.679994] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 3042.681468] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3042.682930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3042.684419] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
[ 3042.685943] CPU: 0 PID: 15001 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3042.686774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3042.687272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3042.687751] Call Trace:
[ 3042.687769]  dump_stack+0x107/0x167
[ 3042.687782]  should_fail.cold+0x5/0xa
[ 3042.687795]  ? create_object.isra.0+0x3a/0xa20
[ 3042.687808]  should_failslab+0x5/0x20
[ 3042.687819]  kmem_cache_alloc+0x5b/0x310
[ 3042.687832]  create_object.isra.0+0x3a/0xa20
[ 3042.687841]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3042.687855]  kmem_cache_alloc_trace+0x151/0x320
[ 3042.687869]  ? cset_cgroup_from_root+0x220/0x220
[ 3042.687880]  percpu_ref_init+0xd8/0x3d0
[ 3042.687894]  cgroup_mkdir+0x288/0xf50
[ 3042.687907]  ? cgroup_destroy_locked+0x710/0x710
[ 3042.687918]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3042.687930]  vfs_mkdir+0x493/0x750
[ 3042.687943]  do_mkdirat+0x150/0x2b0
[ 3042.687954]  ? user_path_create+0xf0/0xf0
[ 3042.687969]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3042.687981]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3042.687992]  do_syscall_64+0x33/0x40
[ 3042.688003]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3042.688011] RIP: 0033:0x7fd21301bb19
[ 3042.688020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3042.688025] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3042.688037] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3042.688043] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3042.688049] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3042.688064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3042.706678] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3042.715711] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:58:50 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r2 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2)

[ 3042.725580] FAULT_INJECTION: forcing a failure.
[ 3042.725580] name failslab, interval 1, probability 0, space 0, times 0
[ 3042.728620] CPU: 1 PID: 14990 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3042.730151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3042.732562] Call Trace:
[ 3042.733361]  dump_stack+0x107/0x167
[ 3042.734458]  should_fail.cold+0x5/0xa
[ 3042.735569]  ? create_object.isra.0+0x3a/0xa20
[ 3042.736922]  should_failslab+0x5/0x20
[ 3042.737996]  kmem_cache_alloc+0x5b/0x310
[ 3042.739189]  ? mark_held_locks+0x9e/0xe0
[ 3042.740402]  create_object.isra.0+0x3a/0xa20
[ 3042.740682] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3042.741706]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3042.741748]  kmem_cache_alloc_bulk+0x168/0x320
[ 3042.745261]  io_submit_sqes+0x6fe6/0x8610
[ 3042.746446]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3042.747948]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3042.749352]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3042.750812]  ? find_held_lock+0x2c/0x110
[ 3042.752047]  ? io_submit_sqes+0x8610/0x8610
[ 3042.753278]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3042.754742]  ? wait_for_completion_io+0x270/0x270
[ 3042.756193]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3042.757474]  ? vfs_write+0x354/0xb10
[ 3042.758678]  ? fput_many+0x2f/0x1a0
[ 3042.759684]  ? ksys_write+0x1a9/0x260
[ 3042.760705]  ? __ia32_sys_read+0xb0/0xb0
[ 3042.761796]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3042.763177]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3042.764390]  do_syscall_64+0x33/0x40
[ 3042.765253]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3042.766437] RIP: 0033:0x7f282e625b19
[ 3042.767315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3042.771617] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3042.773388] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3042.775066] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3042.776581] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3042.778091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3042.779621] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
01:58:50 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3042.815682] FAULT_INJECTION: forcing a failure.
[ 3042.815682] name failslab, interval 1, probability 0, space 0, times 0
[ 3042.818289] CPU: 1 PID: 15005 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3042.819761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3042.821523] Call Trace:
[ 3042.822086]  dump_stack+0x107/0x167
[ 3042.822875]  should_fail.cold+0x5/0xa
[ 3042.823685]  ? create_object.isra.0+0x3a/0xa20
[ 3042.824670]  should_failslab+0x5/0x20
[ 3042.825485]  kmem_cache_alloc+0x5b/0x310
[ 3042.826346]  ? mark_held_locks+0x9e/0xe0
[ 3042.827223]  create_object.isra.0+0x3a/0xa20
[ 3042.828154]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3042.829227]  kmem_cache_alloc_bulk+0x168/0x320
01:58:50 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3042.830206]  io_submit_sqes+0x6fe6/0x8610
[ 3042.831284]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3042.832344]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3042.833406]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3042.834418]  ? find_held_lock+0x2c/0x110
[ 3042.835291]  ? io_submit_sqes+0x8610/0x8610
[ 3042.836213]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3042.837233]  ? wait_for_completion_io+0x270/0x270
[ 3042.838260]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3042.839245]  ? vfs_write+0x354/0xb10
[ 3042.840046]  ? fput_many+0x2f/0x1a0
[ 3042.840816]  ? ksys_write+0x1a9/0x260
[ 3042.841623]  ? __ia32_sys_read+0xb0/0xb0
[ 3042.842474]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3042.843601]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3042.844698]  do_syscall_64+0x33/0x40
[ 3042.845487]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3042.846585] RIP: 0033:0x7fbf3f14eb19
[ 3042.847400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3042.851326] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3042.852953] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 3042.854482] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3042.856033] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 3042.857576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3042.859137] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
01:58:50 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (fail_nth: 12)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3042.913413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3042.917307] FAULT_INJECTION: forcing a failure.
[ 3042.917307] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3042.918971] CPU: 0 PID: 15023 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 3042.919768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3042.920727] Call Trace:
[ 3042.921039]  dump_stack+0x107/0x167
[ 3042.921461]  should_fail.cold+0x5/0xa
[ 3042.921908]  _copy_to_user+0x2e/0x180
[ 3042.922356]  simple_read_from_buffer+0xcc/0x160
[ 3042.922912]  proc_fail_nth_read+0x198/0x230
[ 3042.923410]  ? proc_sessionid_read+0x230/0x230
[ 3042.923938]  ? security_file_permission+0xb1/0xe0
[ 3042.924499]  ? proc_sessionid_read+0x230/0x230
[ 3042.925027]  vfs_read+0x228/0x620
[ 3042.925427]  ksys_read+0x12d/0x260
[ 3042.925842]  ? vfs_write+0xb10/0xb10
[ 3042.926272]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3042.926885]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3042.927482]  do_syscall_64+0x33/0x40
[ 3042.927910]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3042.928500] RIP: 0033:0x7f40efd7a69c
[ 3042.928928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3042.931056] RSP: 002b:00007f40ed33d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3042.931932] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f40efd7a69c
[ 3042.932754] RDX: 000000000000000f RSI: 00007f40ed33d1e0 RDI: 0000000000000005
[ 3042.933575] RBP: 00007f40ed33d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3042.934397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3042.935231] R13: 00007ffc5b717a9f R14: 00007f40ed33d300 R15: 0000000000022000
01:59:03 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:03 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000010)

01:59:03 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:03 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:03 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:59:03 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:59:03 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:03 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x5452, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3055.479576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3055.480353] FAULT_INJECTION: forcing a failure.
[ 3055.480353] name failslab, interval 1, probability 0, space 0, times 0
[ 3055.484194] CPU: 1 PID: 15034 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3055.485639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3055.487370] Call Trace:
[ 3055.487923]  dump_stack+0x107/0x167
[ 3055.488682]  should_fail.cold+0x5/0xa
[ 3055.489477]  ? create_object.isra.0+0x3a/0xa20
[ 3055.490432]  should_failslab+0x5/0x20
[ 3055.491238]  kmem_cache_alloc+0x5b/0x310
[ 3055.492083]  ? mark_held_locks+0x9e/0xe0
[ 3055.492932]  create_object.isra.0+0x3a/0xa20
[ 3055.493850]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3055.494916]  kmem_cache_alloc_bulk+0x168/0x320
[ 3055.495882]  io_submit_sqes+0x6fe6/0x8610
[ 3055.496751]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3055.497784]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3055.498823]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3055.499842]  ? find_held_lock+0x2c/0x110
[ 3055.500694]  ? io_submit_sqes+0x8610/0x8610
[ 3055.501607]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3055.502625]  ? wait_for_completion_io+0x270/0x270
[ 3055.503661]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3055.504626]  ? vfs_write+0x354/0xb10
[ 3055.505407]  ? fput_many+0x2f/0x1a0
[ 3055.506166]  ? ksys_write+0x1a9/0x260
[ 3055.506958]  ? __ia32_sys_read+0xb0/0xb0
[ 3055.507827]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3055.508928]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3055.510008]  do_syscall_64+0x33/0x40
[ 3055.510790]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3055.511866] RIP: 0033:0x7f282e625b19
[ 3055.512645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3055.516501] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3055.518111] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3055.518638] FAULT_INJECTION: forcing a failure.
[ 3055.518638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3055.519622] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3055.519633] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3055.519643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3055.519654] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3055.528573] CPU: 0 PID: 15047 Comm: syz-executor.3 Not tainted 5.10.232 #1
[ 3055.528725] FAULT_INJECTION: forcing a failure.
[ 3055.528725] name failslab, interval 1, probability 0, space 0, times 0
[ 3055.530015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3055.530020] Call Trace:
[ 3055.530040]  dump_stack+0x107/0x167
[ 3055.530059]  should_fail.cold+0x5/0xa
[ 3055.530084]  _copy_from_user+0x2e/0x1b0
[ 3055.530104]  iovec_from_user+0x141/0x400
[ 3055.530134]  __import_iovec+0x67/0x590
[ 3055.538666]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3055.539778]  io_import_iovec+0x581/0x1120
[ 3055.540658]  ? io_complete_rw+0x230/0x230
[ 3055.541528]  ? lock_downgrade+0x6d0/0x6d0
[ 3055.542405]  ? unwind_next_frame+0x13ef/0x1a90
[ 3055.543370]  io_read+0xe14/0x11e0
[ 3055.544110]  ? kiocb_done+0xc90/0xc90
[ 3055.544903]  ? mark_lock+0xf5/0x2df0
[ 3055.545690]  ? lock_chain_count+0x20/0x20
[ 3055.546570]  ? lock_chain_count+0x20/0x20
[ 3055.547441]  ? stack_trace_save+0x8c/0xc0
[ 3055.548308]  ? stack_trace_consume_entry+0x160/0x160
[ 3055.549382]  ? lock_acquire+0x197/0x470
[ 3055.550227]  ? __lock_acquire+0xbb1/0x5b00
[ 3055.551127]  io_issue_sqe+0x2e8a/0x77b0
[ 3055.551972]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3055.553073]  ? lock_chain_count+0x20/0x20
[ 3055.553939]  ? __is_insn_slot_addr+0x14c/0x290
[ 3055.554907]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3055.556016]  ? io_connect+0x610/0x610
[ 3055.556816]  ? lock_acquire+0x197/0x470
[ 3055.557644]  ? find_held_lock+0x2c/0x110
[ 3055.558499]  ? __fget_files+0x2cf/0x520
[ 3055.559338]  ? lock_downgrade+0x6d0/0x6d0
[ 3055.560212]  __io_queue_sqe+0x90/0x9d0
[ 3055.561035]  ? io_issue_sqe+0x77b0/0x77b0
[ 3055.561896]  ? __fget_files+0x2f8/0x520
[ 3055.562729]  ? io_prep_rw+0x7f5/0x1050
[ 3055.563559]  io_submit_sqes+0x44aa/0x8610
[ 3055.564454]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3055.565494]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3055.566508]  ? find_held_lock+0x2c/0x110
[ 3055.567373]  ? io_submit_sqes+0x8610/0x8610
[ 3055.568291]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3055.569310]  ? wait_for_completion_io+0x270/0x270
[ 3055.570326]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3055.571333]  ? vfs_write+0x354/0xb10
[ 3055.572139]  ? fput_many+0x2f/0x1a0
[ 3055.572920]  ? ksys_write+0x1a9/0x260
[ 3055.573713]  ? __ia32_sys_read+0xb0/0xb0
[ 3055.574577]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3055.575678]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3055.576752]  do_syscall_64+0x33/0x40
[ 3055.577521]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3055.578584] RIP: 0033:0x7fbf3f14eb19
[ 3055.579364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3055.583199] RSP: 002b:00007fbf3c6c4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3055.584773] RAX: ffffffffffffffda RBX: 00007fbf3f261f60 RCX: 00007fbf3f14eb19
[ 3055.586256] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3055.587762] RBP: 00007fbf3c6c41d0 R08: 0000000000000000 R09: 0000000000000000
[ 3055.589253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3055.590742] R13: 00007ffd7cd726bf R14: 00007fbf3c6c4300 R15: 0000000000022000
[ 3055.592262] CPU: 1 PID: 15041 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3055.593714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3055.595443] Call Trace:
[ 3055.596016]  dump_stack+0x107/0x167
[ 3055.596781]  should_fail.cold+0x5/0xa
[ 3055.597592]  ? create_object.isra.0+0x3a/0xa20
[ 3055.598550]  should_failslab+0x5/0x20
[ 3055.599364]  kmem_cache_alloc+0x5b/0x310
[ 3055.600226]  create_object.isra.0+0x3a/0xa20
[ 3055.601160]  kmemleak_alloc_percpu+0xa0/0x100
[ 3055.602107]  pcpu_alloc+0x4e2/0x1240
[ 3055.602904]  cgroup_rstat_init+0x14f/0x1f0
[ 3055.603809]  cgroup_mkdir+0x706/0xf50
[ 3055.604622]  ? cgroup_destroy_locked+0x710/0x710
[ 3055.605618]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3055.606498]  vfs_mkdir+0x493/0x750
[ 3055.607262]  do_mkdirat+0x150/0x2b0
[ 3055.608028]  ? user_path_create+0xf0/0xf0
[ 3055.608906]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3055.610006]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3055.611098]  do_syscall_64+0x33/0x40
[ 3055.611878]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3055.612957] RIP: 0033:0x7fd21301bb19
[ 3055.613733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3055.617592] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3055.619196] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3055.620697] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3055.622196] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3055.623697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3055.625198] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
01:59:03 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:03 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3055.746169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3055.802544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:03 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:03 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3055.991386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:03 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3056.029690] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:59:03 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3056.066221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3056.143392] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:03 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x5460, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:59:03 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1000001da)

01:59:03 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:03 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 3056.271351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3056.293337] FAULT_INJECTION: forcing a failure.
[ 3056.293337] name failslab, interval 1, probability 0, space 0, times 0
[ 3056.295744] CPU: 1 PID: 15093 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3056.297068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3056.298677] Call Trace:
[ 3056.299201]  dump_stack+0x107/0x167
[ 3056.299905]  should_fail.cold+0x5/0xa
[ 3056.300653]  ? create_object.isra.0+0x3a/0xa20
[ 3056.301547]  should_failslab+0x5/0x20
[ 3056.302287]  kmem_cache_alloc+0x5b/0x310
[ 3056.303084]  ? mark_held_locks+0x9e/0xe0
[ 3056.303873]  create_object.isra.0+0x3a/0xa20
[ 3056.304725]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3056.305711]  kmem_cache_alloc_bulk+0x168/0x320
[ 3056.306601]  io_submit_sqes+0x6fe6/0x8610
[ 3056.307414]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3056.308376]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3056.309338]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3056.310272]  ? find_held_lock+0x2c/0x110
[ 3056.311066]  ? io_submit_sqes+0x8610/0x8610
[ 3056.311270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3056.311911]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3056.311939]  ? wait_for_completion_io+0x270/0x270
[ 3056.314743]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3056.315634]  ? vfs_write+0x354/0xb10
[ 3056.316351]  ? fput_many+0x2f/0x1a0
[ 3056.317042]  ? ksys_write+0x1a9/0x260
[ 3056.317773]  ? __ia32_sys_read+0xb0/0xb0
[ 3056.318547]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3056.319561]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3056.320551]  do_syscall_64+0x33/0x40
[ 3056.321268]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3056.322246] RIP: 0033:0x7f282e625b19
[ 3056.322960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3056.326501] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3056.327966] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3056.329331] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3056.330700] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3056.332067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3056.333436] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
01:59:04 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:04 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:04 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:59:04 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3056.406738] FAULT_INJECTION: forcing a failure.
[ 3056.406738] name failslab, interval 1, probability 0, space 0, times 0
[ 3056.409089] CPU: 1 PID: 15098 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3056.410350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3056.411875] Call Trace:
[ 3056.412203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3056.412364]  dump_stack+0x107/0x167
[ 3056.414000]  should_fail.cold+0x5/0xa
[ 3056.414702]  ? create_object.isra.0+0x3a/0xa20
[ 3056.415545]  should_failslab+0x5/0x20
[ 3056.416240]  kmem_cache_alloc+0x5b/0x310
[ 3056.416973]  ? mark_held_locks+0x9e/0xe0
[ 3056.417714]  create_object.isra.0+0x3a/0xa20
[ 3056.418518]  kmemleak_alloc_percpu+0xa0/0x100
[ 3056.419343]  pcpu_alloc+0x4e2/0x1240
[ 3056.420033]  cgroup_rstat_init+0x14f/0x1f0
[ 3056.420797]  cgroup_mkdir+0x706/0xf50
[ 3056.421489]  ? cgroup_destroy_locked+0x710/0x710
[ 3056.422340]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3056.423117]  vfs_mkdir+0x493/0x750
[ 3056.423761]  do_mkdirat+0x150/0x2b0
[ 3056.424424]  ? user_path_create+0xf0/0xf0
[ 3056.425191]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3056.426139]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3056.427089]  do_syscall_64+0x33/0x40
[ 3056.427772]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3056.428698] RIP: 0033:0x7fd21301bb19
[ 3056.429370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3056.432718] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3056.434103] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3056.435404] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3056.435417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3056.436678] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3056.436688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3056.436698] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3056.551523] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3056.584130] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:19 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:19 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x6609, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:59:19 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:19 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:59:19 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:19 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x7, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:19 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:59:19 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000514)

[ 3072.031734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3072.044420] FAULT_INJECTION: forcing a failure.
[ 3072.044420] name failslab, interval 1, probability 0, space 0, times 0
[ 3072.047483] CPU: 0 PID: 15122 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3072.049101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3072.049481] FAULT_INJECTION: forcing a failure.
[ 3072.049481] name failslab, interval 1, probability 0, space 0, times 0
[ 3072.051009] Call Trace:
[ 3072.051052]  dump_stack+0x107/0x167
[ 3072.051074]  should_fail.cold+0x5/0xa
[ 3072.051098]  ? kvmalloc_node+0x119/0x170
[ 3072.051121]  should_failslab+0x5/0x20
[ 3072.051139]  __kmalloc_node+0x76/0x420
[ 3072.051168]  kvmalloc_node+0x119/0x170
[ 3072.051191]  ? traverse.part.0+0x620/0x620
[ 3072.059564]  seq_read_iter+0x81c/0x12b0
[ 3072.060483]  ? fsnotify_perm.part.0+0x22d/0x620
[ 3072.061564]  ? traverse.part.0+0x620/0x620
[ 3072.062531]  io_read+0x2dc/0x11e0
[ 3072.063342]  ? kiocb_done+0xc90/0xc90
[ 3072.064221]  ? mark_lock+0xf5/0x2df0
[ 3072.065086]  ? lock_chain_count+0x20/0x20
[ 3072.066050]  ? stack_trace_consume_entry+0x160/0x160
[ 3072.067217]  ? lock_chain_count+0x20/0x20
[ 3072.068181]  ? lock_acquire+0x197/0x470
[ 3072.069100]  ? __lock_acquire+0xbb1/0x5b00
[ 3072.070075]  io_issue_sqe+0x2e8a/0x77b0
[ 3072.070999]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3072.072209]  ? lock_chain_count+0x20/0x20
[ 3072.073161]  ? __is_insn_slot_addr+0x14c/0x290
[ 3072.074213]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3072.075413]  ? io_connect+0x610/0x610
[ 3072.076300]  ? lock_acquire+0x197/0x470
[ 3072.077211]  ? find_held_lock+0x2c/0x110
[ 3072.078149]  ? __fget_files+0x2cf/0x520
[ 3072.079062]  ? lock_downgrade+0x6d0/0x6d0
[ 3072.080030]  __io_queue_sqe+0x90/0x9d0
[ 3072.080932]  ? io_issue_sqe+0x77b0/0x77b0
[ 3072.081882]  ? __fget_files+0x2f8/0x520
[ 3072.082799]  ? io_prep_rw+0x7f5/0x1050
[ 3072.083705]  io_submit_sqes+0x44aa/0x8610
[ 3072.084688]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3072.085831]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3072.086940]  ? find_held_lock+0x2c/0x110
[ 3072.087887]  ? io_submit_sqes+0x8610/0x8610
[ 3072.088887]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3072.089997]  ? wait_for_completion_io+0x270/0x270
[ 3072.091107]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3072.092178]  ? vfs_write+0x354/0xb10
[ 3072.093031]  ? fput_many+0x2f/0x1a0
[ 3072.093864]  ? ksys_write+0x1a9/0x260
[ 3072.094737]  ? __ia32_sys_read+0xb0/0xb0
[ 3072.095679]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3072.096881]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3072.098065]  do_syscall_64+0x33/0x40
[ 3072.098919]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3072.100102] RIP: 0033:0x7f282e625b19
[ 3072.100956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3072.105186] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3072.106944] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3072.108594] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3072.110233] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3072.111877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3072.113518] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3072.115184] CPU: 1 PID: 15134 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3072.116194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3072.117373] Call Trace:
[ 3072.117763]  dump_stack+0x107/0x167
[ 3072.118277]  should_fail.cold+0x5/0xa
[ 3072.118819]  should_failslab+0x5/0x20
[ 3072.119360]  __kmalloc_track_caller+0x79/0x370
[ 3072.120012]  ? kstrdup_const+0x53/0x80
[ 3072.120564]  ? find_held_lock+0x2c/0x110
[ 3072.121139]  kstrdup+0x36/0x70
[ 3072.121594]  kstrdup_const+0x53/0x80
[ 3072.122121]  __kernfs_new_node+0x9d/0x860
[ 3072.122708]  ? mark_held_locks+0x9e/0xe0
[ 3072.123285]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3072.123961]  ? cpumask_next+0x1f/0x30
[ 3072.124501]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3072.125158]  ? pcpu_alloc+0x12a/0x1240
[ 3072.125710]  kernfs_new_node+0x18d/0x250
[ 3072.126286]  kernfs_create_dir_ns+0x49/0x160
[ 3072.126916]  cgroup_mkdir+0x315/0xf50
[ 3072.127455]  ? cgroup_destroy_locked+0x710/0x710
[ 3072.128126]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3072.128711]  vfs_mkdir+0x493/0x750
[ 3072.129212]  do_mkdirat+0x150/0x2b0
[ 3072.129730]  ? user_path_create+0xf0/0xf0
[ 3072.130316]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3072.131050]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3072.131782]  do_syscall_64+0x33/0x40
[ 3072.132309]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3072.133023] RIP: 0033:0x7fd21301bb19
[ 3072.133544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3072.136130] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3072.137201] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3072.138201] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3072.139200] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3072.140214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3072.141221] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3072.157708] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
01:59:19 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3072.211977] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:19 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:19 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3072.359257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3072.378040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3072.394332] FAULT_INJECTION: forcing a failure.
[ 3072.394332] name failslab, interval 1, probability 0, space 0, times 0
[ 3072.397164] CPU: 0 PID: 15156 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3072.398747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3072.400658] Call Trace:
[ 3072.401267]  dump_stack+0x107/0x167
[ 3072.402103]  should_fail.cold+0x5/0xa
[ 3072.402980]  ? create_object.isra.0+0x3a/0xa20
[ 3072.404036]  should_failslab+0x5/0x20
[ 3072.404911]  kmem_cache_alloc+0x5b/0x310
[ 3072.405851]  create_object.isra.0+0x3a/0xa20
[ 3072.406857]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3072.408041]  __kmalloc_track_caller+0x177/0x370
[ 3072.409111]  ? kstrdup_const+0x53/0x80
[ 3072.410001]  ? find_held_lock+0x2c/0x110
[ 3072.410939]  kstrdup+0x36/0x70
[ 3072.411686]  kstrdup_const+0x53/0x80
[ 3072.412544]  __kernfs_new_node+0x9d/0x860
[ 3072.413494]  ? mark_held_locks+0x9e/0xe0
[ 3072.414429]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3072.415520]  ? cpumask_next+0x1f/0x30
[ 3072.416403]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3072.417474]  ? pcpu_alloc+0x12a/0x1240
[ 3072.418378]  kernfs_new_node+0x18d/0x250
[ 3072.419315]  kernfs_create_dir_ns+0x49/0x160
[ 3072.420334]  cgroup_mkdir+0x315/0xf50
[ 3072.421217]  ? cgroup_destroy_locked+0x710/0x710
[ 3072.422300]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3072.423251]  vfs_mkdir+0x493/0x750
[ 3072.424077]  do_mkdirat+0x150/0x2b0
[ 3072.424913]  ? user_path_create+0xf0/0xf0
[ 3072.425870]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3072.427069]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3072.428260]  do_syscall_64+0x33/0x40
[ 3072.429116]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3072.430290] RIP: 0033:0x7fd21301bb19
[ 3072.431141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3072.435362] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3072.437114] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3072.438746] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3072.440388] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3072.442022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3072.443665] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3072.464379] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3072.505307] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:33 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:33 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x660c, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

01:59:33 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000700)

01:59:33 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:33 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:33 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:33 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3085.716181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:33 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 3085.749002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3085.764316] FAULT_INJECTION: forcing a failure.
[ 3085.764316] name failslab, interval 1, probability 0, space 0, times 0
[ 3085.767135] CPU: 0 PID: 15185 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3085.768731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3085.770611] Call Trace:
[ 3085.771214]  dump_stack+0x107/0x167
[ 3085.772058]  should_fail.cold+0x5/0xa
[ 3085.772928]  ? __kernfs_new_node+0xd4/0x860
[ 3085.773908]  should_failslab+0x5/0x20
[ 3085.774768]  kmem_cache_alloc+0x5b/0x310
[ 3085.775700]  __kernfs_new_node+0xd4/0x860
[ 3085.776653]  ? mark_held_locks+0x9e/0xe0
[ 3085.777574]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3085.778655]  ? cpumask_next+0x1f/0x30
[ 3085.779500]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3085.780564]  ? pcpu_alloc+0x12a/0x1240
[ 3085.781449]  kernfs_new_node+0x18d/0x250
[ 3085.782380]  kernfs_create_dir_ns+0x49/0x160
[ 3085.783385]  cgroup_mkdir+0x315/0xf50
[ 3085.784260]  ? cgroup_destroy_locked+0x710/0x710
[ 3085.785337]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3085.786273]  vfs_mkdir+0x493/0x750
[ 3085.787073]  do_mkdirat+0x150/0x2b0
[ 3085.787898]  ? user_path_create+0xf0/0xf0
[ 3085.788842]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3085.790042]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3085.791221]  do_syscall_64+0x33/0x40
[ 3085.792073]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3085.793237] RIP: 0033:0x7fd21301bb19
[ 3085.794081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3085.794171] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3085.798232] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3085.798255] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3085.798266] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3085.798283] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3085.805726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3085.807341] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
01:59:33 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3085.828430] FAULT_INJECTION: forcing a failure.
[ 3085.828430] name failslab, interval 1, probability 0, space 0, times 0
[ 3085.830247] CPU: 1 PID: 15188 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3085.831230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3085.832405] Call Trace:
[ 3085.832778]  dump_stack+0x107/0x167
[ 3085.833296]  should_fail.cold+0x5/0xa
[ 3085.833852]  ? create_object.isra.0+0x3a/0xa20
[ 3085.834517]  should_failslab+0x5/0x20
[ 3085.835063]  kmem_cache_alloc+0x5b/0x310
[ 3085.835649]  ? find_held_lock+0x2c/0x110
[ 3085.836232]  create_object.isra.0+0x3a/0xa20
[ 3085.836850]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3085.837565]  __kmalloc_node+0x1ae/0x420
[ 3085.838144]  memcg_alloc_page_obj_cgroups+0x73/0x100
[ 3085.838857]  memcg_slab_post_alloc_hook+0x1f0/0x430
[ 3085.839565]  kmem_cache_alloc_bulk+0x182/0x320
[ 3085.840217]  io_submit_sqes+0x6fe6/0x8610
[ 3085.840812]  ? __io_uring_add_tctx_node+0xe6/0x520
[ 3085.841525]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3085.842231]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3085.842907]  ? find_held_lock+0x2c/0x110
[ 3085.843495]  ? io_submit_sqes+0x8610/0x8610
[ 3085.844144]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3085.844853]  ? wait_for_completion_io+0x270/0x270
[ 3085.845552]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3085.846209]  ? vfs_write+0x354/0xb10
[ 3085.846731]  ? fput_many+0x2f/0x1a0
[ 3085.847271]  ? ksys_write+0x1a9/0x260
[ 3085.847813]  ? __ia32_sys_read+0xb0/0xb0
[ 3085.848397]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3085.849133]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3085.849856]  do_syscall_64+0x33/0x40
[ 3085.850386]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3085.851115] RIP: 0033:0x7f282e625b19
[ 3085.851647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3085.854267] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3085.855356] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3085.856404] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3085.857411] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3085.858417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3085.859425] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3085.908047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:33 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3085.941330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3085.945962] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:33 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:33 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3086.153263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:33 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x6611, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3086.199288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:33 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3086.240332] FAULT_INJECTION: forcing a failure.
[ 3086.240332] name failslab, interval 1, probability 0, space 0, times 0
[ 3086.243132] CPU: 0 PID: 15214 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3086.244713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3086.246576] Call Trace:
[ 3086.247173]  dump_stack+0x107/0x167
[ 3086.247995]  should_fail.cold+0x5/0xa
[ 3086.248874]  ? create_object.isra.0+0x3a/0xa20
[ 3086.249906]  should_failslab+0x5/0x20
[ 3086.250766]  kmem_cache_alloc+0x5b/0x310
[ 3086.251688]  create_object.isra.0+0x3a/0xa20
[ 3086.252682]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3086.253854]  kmem_cache_alloc+0x159/0x310
[ 3086.254799]  __kernfs_new_node+0xd4/0x860
[ 3086.255739]  ? mark_held_locks+0x9e/0xe0
[ 3086.256666]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3086.257744]  ? cpumask_next+0x1f/0x30
[ 3086.258609]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3086.259665]  ? pcpu_alloc+0x12a/0x1240
[ 3086.260558]  kernfs_new_node+0x18d/0x250
[ 3086.261479]  kernfs_create_dir_ns+0x49/0x160
[ 3086.262473]  cgroup_mkdir+0x315/0xf50
[ 3086.263338]  ? cgroup_destroy_locked+0x710/0x710
[ 3086.264425]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3086.265360]  vfs_mkdir+0x493/0x750
[ 3086.266165]  do_mkdirat+0x150/0x2b0
[ 3086.266987]  ? user_path_create+0xf0/0xf0
[ 3086.267929]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3086.269135]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3086.270299]  do_syscall_64+0x33/0x40
[ 3086.271138]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3086.272309] RIP: 0033:0x7fd21301bb19
01:59:33 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3086.273149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3086.277513] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3086.279230] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3086.280853] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3086.282466] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3086.284076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3086.285696] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3086.319260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3086.345140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:34 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3086.390929] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3086.454155] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:45 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:45 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x6612, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3097.888342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3097.892656] FAULT_INJECTION: forcing a failure.
[ 3097.892656] name failslab, interval 1, probability 0, space 0, times 0
[ 3097.894220] CPU: 1 PID: 15256 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3097.895042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3097.895984] Call Trace:
[ 3097.896305]  dump_stack+0x107/0x167
[ 3097.896728]  should_fail.cold+0x5/0xa
[ 3097.897173]  ? radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 3097.897826]  should_failslab+0x5/0x20
[ 3097.898271]  kmem_cache_alloc+0x5b/0x310
[ 3097.898745]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 3097.899401]  idr_get_free+0x4b5/0x8f0
[ 3097.899957]  idr_alloc_u32+0x170/0x2d0
[ 3097.900524]  ? __fprop_inc_percpu_max+0x130/0x130
[ 3097.901092]  ? lock_acquire+0x197/0x470
[ 3097.901554]  ? __kernfs_new_node+0xff/0x860
[ 3097.902060]  idr_alloc_cyclic+0x102/0x230
[ 3097.902532]  ? idr_alloc+0x130/0x130
[ 3097.902964]  ? rwlock_bug.part.0+0x90/0x90
[ 3097.903455]  __kernfs_new_node+0x117/0x860
[ 3097.903960]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3097.904525]  ? cpumask_next+0x1f/0x30
[ 3097.904975]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3097.905510]  ? pcpu_alloc+0x12a/0x1240
[ 3097.905972]  kernfs_new_node+0x18d/0x250
[ 3097.906438]  kernfs_create_dir_ns+0x49/0x160
[ 3097.906961]  cgroup_mkdir+0x315/0xf50
[ 3097.907408]  ? cgroup_destroy_locked+0x710/0x710
[ 3097.907965]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3097.908445]  vfs_mkdir+0x493/0x750
[ 3097.908866]  do_mkdirat+0x150/0x2b0
[ 3097.909292]  ? user_path_create+0xf0/0xf0
[ 3097.909776]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3097.910397]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3097.910990]  do_syscall_64+0x33/0x40
[ 3097.911427]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3097.912028] RIP: 0033:0x7fd21301bb19
[ 3097.912481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3097.915214] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3097.916337] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3097.917283] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3097.918114] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3097.918943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3097.919768] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3097.946912] FAULT_INJECTION: forcing a failure.
[ 3097.946912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3097.948379] CPU: 1 PID: 15259 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3097.949192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3097.950153] Call Trace:
[ 3097.950469]  dump_stack+0x107/0x167
[ 3097.950894]  should_fail.cold+0x5/0xa
[ 3097.951339]  _copy_to_iter+0x264/0x12d0
[ 3097.951808]  ? __up_read+0x19f/0x7a0
[ 3097.952241]  ? seq_read_iter+0xd4d/0x12b0
[ 3097.952731]  ? _copy_from_iter_nocache+0xd60/0xd60
[ 3097.953300]  ? __virt_addr_valid+0x170/0x5d0
[ 3097.953821]  ? __check_object_size+0x319/0x440
[ 3097.954356]  seq_read_iter+0xdcb/0x12b0
[ 3097.954831]  ? traverse.part.0+0x620/0x620
[ 3097.955326]  io_read+0x2dc/0x11e0
[ 3097.955739]  ? kiocb_done+0xc90/0xc90
[ 3097.956180]  ? mark_lock+0xf5/0x2df0
[ 3097.956624]  ? lock_chain_count+0x20/0x20
[ 3097.957114]  ? stack_trace_consume_entry+0x160/0x160
[ 3097.957706]  ? lock_acquire+0x197/0x470
[ 3097.958175]  ? __lock_acquire+0xbb1/0x5b00
[ 3097.958674]  io_issue_sqe+0x2e8a/0x77b0
[ 3097.959144]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3097.959752]  ? lock_chain_count+0x20/0x20
[ 3097.960239]  ? __is_insn_slot_addr+0x14c/0x290
[ 3097.960779]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3097.961389]  ? io_connect+0x610/0x610
[ 3097.961839]  ? lock_acquire+0x197/0x470
[ 3097.962302]  ? find_held_lock+0x2c/0x110
[ 3097.962778]  ? __fget_files+0x2cf/0x520
[ 3097.963242]  ? lock_downgrade+0x6d0/0x6d0
[ 3097.963729]  __io_queue_sqe+0x90/0x9d0
[ 3097.964187]  ? io_issue_sqe+0x77b0/0x77b0
[ 3097.964680]  ? __fget_files+0x2f8/0x520
[ 3097.965145]  ? io_prep_rw+0x7f5/0x1050
[ 3097.965608]  io_submit_sqes+0x44aa/0x8610
[ 3097.966105]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3097.966689]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3097.967256]  ? find_held_lock+0x2c/0x110
[ 3097.967736]  ? io_submit_sqes+0x8610/0x8610
[ 3097.968242]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3097.968818]  ? wait_for_completion_io+0x270/0x270
[ 3097.969383]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3097.969924]  ? vfs_write+0x354/0xb10
[ 3097.970357]  ? fput_many+0x2f/0x1a0
[ 3097.970784]  ? ksys_write+0x1a9/0x260
[ 3097.971229]  ? __ia32_sys_read+0xb0/0xb0
[ 3097.971709]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3097.972318]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3097.972939]  do_syscall_64+0x33/0x40
[ 3097.973378]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3097.973983] RIP: 0033:0x7f282e625b19
[ 3097.974424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3097.976603] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3097.977503] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3097.978344] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3097.979054] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3097.979182] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3097.979197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3097.982292] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
01:59:45 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:45 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

01:59:45 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

01:59:45 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

01:59:45 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:59:45 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f340)={0x6, [], 0x0, "f1637dba6fac68"})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r1}}, 0x81)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x93, 0x3}, 0x0, 0x0, 0x1}, 0x803)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x100000001)

01:59:45 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3097.992002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3098.039657] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:45 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3098.119442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
01:59:45 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:45 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

01:59:45 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x6628, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3098.221592] FAULT_INJECTION: forcing a failure.
[ 3098.221592] name failslab, interval 1, probability 0, space 0, times 0
[ 3098.223117] CPU: 1 PID: 15281 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3098.223941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3098.224931] Call Trace:
[ 3098.225247]  dump_stack+0x107/0x167
[ 3098.225676]  should_fail.cold+0x5/0xa
[ 3098.226128]  ? create_object.isra.0+0x3a/0xa20
[ 3098.226666]  should_failslab+0x5/0x20
[ 3098.227117]  kmem_cache_alloc+0x5b/0x310
[ 3098.227602]  create_object.isra.0+0x3a/0xa20
[ 3098.228126]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3098.228740]  kmem_cache_alloc+0x159/0x310
[ 3098.229231]  __kernfs_new_node+0xd4/0x860
[ 3098.229725]  ? mark_held_locks+0x9e/0xe0
[ 3098.230204]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3098.230765]  ? cpumask_next+0x1f/0x30
[ 3098.231213]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3098.231763]  ? pcpu_alloc+0x12a/0x1240
[ 3098.232227]  kernfs_new_node+0x18d/0x250
[ 3098.232714]  kernfs_create_dir_ns+0x49/0x160
[ 3098.233234]  cgroup_mkdir+0x315/0xf50
[ 3098.233688]  ? cgroup_destroy_locked+0x710/0x710
[ 3098.234244]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3098.234734]  vfs_mkdir+0x493/0x750
[ 3098.235159]  do_mkdirat+0x150/0x2b0
[ 3098.235590]  ? user_path_create+0xf0/0xf0
[ 3098.236082]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3098.236701]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3098.237306]  do_syscall_64+0x33/0x40
[ 3098.237745]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3098.238351] RIP: 0033:0x7fd21301bb19
[ 3098.238788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3098.240958] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3098.241856] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3098.242700] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3098.243540] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3098.244381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3098.245227] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
01:59:45 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

01:59:46 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
openat(r0, &(0x7f00000000c0)='./file1/file0/../file0\x00', 0x840, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fstat(r0, &(0x7f0000000500))
fallocate(r2, 0x0, 0x0, 0x1000002)
sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0000000160000042cbd7000f9dbdf2509000000cf18a275e667d6c20238f70b3292346b7545bf9f4ce4e23e55d9c62aff059241aa15c5c4f49338ee0457bcc93cc6e87ea44589693c8e27715fcee7e0040ae65bdac8839a0e08001400e000000204008c00d0f6bdfb1467a18269704d6bab0dffe72d9064e260974156000c00db4a8a743c999eef35f6e2fc5df19f18912f541b1836aea3589d6bdb629153ec1911e845782fda2be83841c1df1e0f14059c53211873c718f7e383bc74359570b9c4e95889713f3461abe66a540d719c"], 0xd0}, 0x1, 0x0, 0x0, 0x2004c084}, 0x4000084)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x81)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

01:59:46 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3098.339397] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3098.381481] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3098.408046] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
01:59:46 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3098.470492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3112.955404] FAULT_INJECTION: forcing a failure.
[ 3112.955404] name failslab, interval 1, probability 0, space 0, times 0
[ 3112.957143] CPU: 0 PID: 15324 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3112.958040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3112.959107] Call Trace:
[ 3112.959448]  dump_stack+0x107/0x167
[ 3112.959927]  should_fail.cold+0x5/0xa
[ 3112.960421]  ? selinux_kernfs_init_security+0x137/0x4c0
[ 3112.961126]  should_failslab+0x5/0x20
[ 3112.961849]  __kmalloc+0x72/0x390
[ 3112.962359]  selinux_kernfs_init_security+0x137/0x4c0
[ 3112.963028]  ? selinux_file_mprotect+0x610/0x610
[ 3112.963648]  ? find_held_lock+0x2c/0x110
[ 3112.964173]  ? __kernfs_new_node+0x2ad/0x860
[ 3112.964751]  ? lock_downgrade+0x6d0/0x6d0
[ 3112.965308]  ? rwlock_bug.part.0+0x90/0x90
[ 3112.965861]  security_kernfs_init_security+0x4e/0xb0
[ 3112.966368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3112.966533]  __kernfs_new_node+0x531/0x860
[ 3112.968862]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3112.969495]  ? cpumask_next+0x1f/0x30
[ 3112.969989]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3112.970601]  ? pcpu_alloc+0x12a/0x1240
[ 3112.971116]  kernfs_new_node+0x18d/0x250
[ 3112.971659]  kernfs_create_dir_ns+0x49/0x160
[ 3112.972236]  cgroup_mkdir+0x315/0xf50
[ 3112.972744]  ? cgroup_destroy_locked+0x710/0x710
[ 3112.973360]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3112.973903]  vfs_mkdir+0x493/0x750
[ 3112.974378]  do_mkdirat+0x150/0x2b0
[ 3112.974859]  ? user_path_create+0xf0/0xf0
[ 3112.975404]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3112.976098]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3112.976773]  do_syscall_64+0x33/0x40
[ 3112.977288]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3112.977953] RIP: 0033:0x7fd21301bb19
[ 3112.978440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3112.980829] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3112.981818] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
02:00:00 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:00:00 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:00 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:00 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40046629, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:00:00 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:00 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

02:00:00 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
[ 3112.982114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xd, 0x6, 0x7, 0x81, 0x0, 0xd2e, 0x81010, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x92, 0x2, 0x80000000, 0x4, 0x800, 0x7, 0x6, 0x0, 0x6, 0x0, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
move_pages(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000440)=[0xfff, 0x5, 0x5, 0x2, 0x1, 0x1, 0x3, 0xfbcd], &(0x7f0000000500)=[0x0, 0x0], 0x2)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

02:00:00 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3112.982744] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3112.982750] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3112.982757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3112.982763] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3113.005942] FAULT_INJECTION: forcing a failure.
[ 3113.005942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3113.007481] CPU: 0 PID: 15325 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3113.008355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3113.009406] Call Trace:
[ 3113.009740]  dump_stack+0x107/0x167
[ 3113.010211]  should_fail.cold+0x5/0xa
[ 3113.010709]  _copy_from_user+0x2e/0x1b0
[ 3113.011222]  iovec_from_user+0x141/0x400
[ 3113.011741]  __import_iovec+0x67/0x590
[ 3113.012242]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3113.012857]  io_import_iovec+0x581/0x1120
[ 3113.013394]  ? io_complete_rw+0x230/0x230
[ 3113.013915]  ? kiocb_done+0x16b/0xc90
[ 3113.014397]  io_read+0xe14/0x11e0
[ 3113.014853]  ? kiocb_done+0xc90/0xc90
[ 3113.015339]  ? mark_lock+0xf5/0x2df0
[ 3113.015813]  ? lock_chain_count+0x20/0x20
[ 3113.016344]  ? stack_trace_consume_entry+0x160/0x160
[ 3113.016995]  ? lock_acquire+0x197/0x470
[ 3113.017517]  ? __lock_acquire+0xbb1/0x5b00
[ 3113.018065]  io_issue_sqe+0x2e8a/0x77b0
[ 3113.018572]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3113.019237]  ? lock_chain_count+0x20/0x20
[ 3113.019771]  ? __is_insn_slot_addr+0x14c/0x290
[ 3113.020348]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3113.021020]  ? io_connect+0x610/0x610
[ 3113.021516]  ? lock_acquire+0x197/0x470
[ 3113.022025]  ? find_held_lock+0x2c/0x110
[ 3113.022548]  ? __fget_files+0x2cf/0x520
[ 3113.023063]  ? lock_downgrade+0x6d0/0x6d0
[ 3113.023607]  __io_queue_sqe+0x90/0x9d0
[ 3113.024099]  ? io_issue_sqe+0x77b0/0x77b0
[ 3113.024628]  ? __fget_files+0x2f8/0x520
[ 3113.025149]  ? io_prep_rw+0x7f5/0x1050
[ 3113.025636]  io_submit_sqes+0x44aa/0x8610
02:00:00 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x6c, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3113.026170]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3113.026969]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3113.027573]  ? find_held_lock+0x2c/0x110
[ 3113.028081]  ? io_submit_sqes+0x8610/0x8610
[ 3113.028623]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3113.029238]  ? wait_for_completion_io+0x270/0x270
[ 3113.029837]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3113.030415]  ? vfs_write+0x354/0xb10
[ 3113.030891]  ? fput_many+0x2f/0x1a0
[ 3113.031347]  ? ksys_write+0x1a9/0x260
[ 3113.031831]  ? __ia32_sys_read+0xb0/0xb0
[ 3113.032345]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3113.033015]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3113.033664]  do_syscall_64+0x33/0x40
[ 3113.034127]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3113.034774] RIP: 0033:0x7f282e625b19
[ 3113.035242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.037563] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3113.038516] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3113.039421] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3113.040306] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3113.040660] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3113.041202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3113.041210] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3113.076268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3113.159710] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:00:00 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x74, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:00 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:00:00 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40049409, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:00:00 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3113.349601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:00:01 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3113.410693] FAULT_INJECTION: forcing a failure.
[ 3113.410693] name failslab, interval 1, probability 0, space 0, times 0
[ 3113.412080] CPU: 0 PID: 15361 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3113.412881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3113.413840] Call Trace:
[ 3113.414150]  dump_stack+0x107/0x167
[ 3113.414562]  should_fail.cold+0x5/0xa
[ 3113.415010]  ? create_object.isra.0+0x3a/0xa20
[ 3113.415527]  should_failslab+0x5/0x20
[ 3113.415964]  kmem_cache_alloc+0x5b/0x310
[ 3113.416428]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3113.416982]  create_object.isra.0+0x3a/0xa20
[ 3113.417484]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3113.418064]  __kmalloc+0x16e/0x390
[ 3113.418478]  selinux_kernfs_init_security+0x137/0x4c0
[ 3113.419072]  ? selinux_file_mprotect+0x610/0x610
[ 3113.419621]  ? find_held_lock+0x2c/0x110
[ 3113.420100]  ? __kernfs_new_node+0x2ad/0x860
[ 3113.420605]  ? lock_downgrade+0x6d0/0x6d0
[ 3113.421087]  ? rwlock_bug.part.0+0x90/0x90
[ 3113.421574]  security_kernfs_init_security+0x4e/0xb0
[ 3113.422158]  __kernfs_new_node+0x531/0x860
[ 3113.422652]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3113.423200]  ? cpumask_next+0x1f/0x30
[ 3113.423637]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3113.424174]  ? pcpu_alloc+0x12a/0x1240
[ 3113.424626]  kernfs_new_node+0x18d/0x250
[ 3113.425104]  kernfs_create_dir_ns+0x49/0x160
[ 3113.425606]  cgroup_mkdir+0x315/0xf50
[ 3113.426048]  ? cgroup_destroy_locked+0x710/0x710
[ 3113.426592]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3113.427067]  vfs_mkdir+0x493/0x750
[ 3113.427476]  do_mkdirat+0x150/0x2b0
[ 3113.427891]  ? user_path_create+0xf0/0xf0
[ 3113.428369]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3113.428969]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3113.429562]  do_syscall_64+0x33/0x40
[ 3113.429989]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3113.430580] RIP: 0033:0x7fd21301bb19
[ 3113.431010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.433106] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3113.433972] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3113.434799] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3113.435629] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3113.436452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3113.437404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3113.438216] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
02:00:01 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

02:00:01 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3113.504265] FAULT_INJECTION: forcing a failure.
[ 3113.504265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3113.505913] CPU: 0 PID: 15370 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3113.506699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3113.507646] Call Trace:
[ 3113.507962]  dump_stack+0x107/0x167
[ 3113.508386]  should_fail.cold+0x5/0xa
[ 3113.508831]  _copy_to_iter+0x264/0x12d0
[ 3113.509302]  ? __up_read+0x19f/0x7a0
[ 3113.509733]  ? _copy_from_iter_nocache+0xd60/0xd60
[ 3113.510293]  ? __virt_addr_valid+0x170/0x5d0
[ 3113.510793]  ? __check_object_size+0x319/0x440
[ 3113.511320]  seq_read_iter+0xdcb/0x12b0
[ 3113.511783]  ? traverse.part.0+0x620/0x620
[ 3113.512266]  io_read+0x2dc/0x11e0
[ 3113.512672]  ? kiocb_done+0xc90/0xc90
[ 3113.513121]  ? mark_lock+0xf5/0x2df0
[ 3113.513552]  ? lock_chain_count+0x20/0x20
[ 3113.514035]  ? stack_trace_consume_entry+0x160/0x160
[ 3113.514614]  ? lock_acquire+0x197/0x470
[ 3113.515070]  ? __lock_acquire+0xbb1/0x5b00
[ 3113.515552]  io_issue_sqe+0x2e8a/0x77b0
[ 3113.516020]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3113.516617]  ? lock_chain_count+0x20/0x20
[ 3113.517110]  ? __is_insn_slot_addr+0x14c/0x290
[ 3113.517629]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3113.518225]  ? io_connect+0x610/0x610
[ 3113.518662]  ? lock_acquire+0x197/0x470
[ 3113.519118]  ? find_held_lock+0x2c/0x110
[ 3113.519585]  ? __fget_files+0x2cf/0x520
[ 3113.520042]  ? lock_downgrade+0x6d0/0x6d0
[ 3113.520520]  __io_queue_sqe+0x90/0x9d0
[ 3113.520973]  ? io_issue_sqe+0x77b0/0x77b0
[ 3113.521457]  ? __fget_files+0x2f8/0x520
[ 3113.521916]  ? io_prep_rw+0x7f5/0x1050
[ 3113.522361]  io_submit_sqes+0x44aa/0x8610
[ 3113.522846]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3113.523417]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3113.523970]  ? find_held_lock+0x2c/0x110
[ 3113.524437]  ? io_submit_sqes+0x8610/0x8610
[ 3113.524941]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3113.525505]  ? wait_for_completion_io+0x270/0x270
[ 3113.526064]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3113.526593]  ? vfs_write+0x354/0xb10
[ 3113.527016]  ? fput_many+0x2f/0x1a0
[ 3113.527433]  ? ksys_write+0x1a9/0x260
[ 3113.527871]  ? __ia32_sys_read+0xb0/0xb0
[ 3113.528334]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3113.528937]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3113.529531]  do_syscall_64+0x33/0x40
[ 3113.529961]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3113.530548] RIP: 0033:0x7f282e625b19
[ 3113.530976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3113.533096] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3113.533967] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3113.534779] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3113.535597] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3113.536408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3113.537235] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
02:00:01 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:01 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x7a, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3113.593368] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3113.622084] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3113.675292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3113.717314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:00:14 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

02:00:14 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:14 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40086602, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:00:15 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:00:15 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:15 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

02:00:15 executing program 1:
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
preadv(0xffffffffffffffff, &(0x7f0000002400)=[{0x0}], 0x1, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40, 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x22)
execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r3, 0x2)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000))
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0xffffffffffffff80, 0x6, 0x50})

02:00:15 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3127.386421] FAULT_INJECTION: forcing a failure.
[ 3127.386421] name failslab, interval 1, probability 0, space 0, times 0
[ 3127.389157] CPU: 0 PID: 15398 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3127.390637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3127.392383] Call Trace:
[ 3127.392948]  dump_stack+0x107/0x167
[ 3127.393726]  should_fail.cold+0x5/0xa
[ 3127.394547]  should_failslab+0x5/0x20
[ 3127.395347]  __kmalloc_track_caller+0x79/0x370
[ 3127.395631] process 'syz-executor.1' launched '/dev/fd/-1/./file0' with NULL argv: empty string added
[ 3127.396310]  ? security_context_to_sid_core+0xb4/0x890
[ 3127.396340]  kmemdup_nul+0x2d/0xa0
[ 3127.399441]  security_context_to_sid_core+0xb4/0x890
[ 3127.400522]  ? security_compute_sid.part.0+0x16e0/0x16e0
[ 3127.401677]  ? do_raw_spin_lock+0x121/0x260
[ 3127.402588]  ? rwlock_bug.part.0+0x90/0x90
[ 3127.403491]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3127.404513]  ? do_raw_spin_unlock+0x4f/0x220
[ 3127.405439]  ? _raw_spin_unlock+0x1a/0x30
[ 3127.406323]  security_context_to_sid+0x35/0x50
[ 3127.407299]  selinux_kernfs_init_security+0x19d/0x4c0
[ 3127.408382]  ? selinux_file_mprotect+0x610/0x610
[ 3127.409382]  ? find_held_lock+0x2c/0x110
[ 3127.410261]  ? __kernfs_new_node+0x2ad/0x860
[ 3127.411189]  ? lock_downgrade+0x6d0/0x6d0
[ 3127.412064]  ? rwlock_bug.part.0+0x90/0x90
[ 3127.412967]  security_kernfs_init_security+0x4e/0xb0
[ 3127.414081]  __kernfs_new_node+0x531/0x860
[ 3127.414988]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3127.416008]  ? cpumask_next+0x1f/0x30
[ 3127.416819]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3127.417809]  ? pcpu_alloc+0x12a/0x1240
[ 3127.418634]  kernfs_new_node+0x18d/0x250
[ 3127.419496]  kernfs_create_dir_ns+0x49/0x160
[ 3127.420425]  cgroup_mkdir+0x315/0xf50
[ 3127.421239]  ? cgroup_destroy_locked+0x710/0x710
[ 3127.422247]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3127.423123]  vfs_mkdir+0x493/0x750
[ 3127.423877]  do_mkdirat+0x150/0x2b0
[ 3127.424643]  ? user_path_create+0xf0/0xf0
[ 3127.425532]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3127.426174] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3127.426630]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3127.428524]  do_syscall_64+0x33/0x40
[ 3127.429305]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3127.430395] RIP: 0033:0x7fd21301bb19
[ 3127.431175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3127.435044] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3127.436645] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3127.438151] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3127.439653] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3127.441153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3127.442663] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3127.452495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3127.475275] FAULT_INJECTION: forcing a failure.
[ 3127.475275] name failslab, interval 1, probability 0, space 0, times 0
[ 3127.477884] CPU: 0 PID: 15412 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3127.479342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3127.481093] Call Trace:
[ 3127.481658]  dump_stack+0x107/0x167
[ 3127.482432]  should_fail.cold+0x5/0xa
[ 3127.483239]  ? create_object.isra.0+0x3a/0xa20
[ 3127.484204]  should_failslab+0x5/0x20
[ 3127.485003]  kmem_cache_alloc+0x5b/0x310
[ 3127.485864]  ? mark_held_locks+0x9e/0xe0
[ 3127.486722]  create_object.isra.0+0x3a/0xa20
[ 3127.487649]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3127.488723]  kmem_cache_alloc_bulk+0x168/0x320
[ 3127.489702]  io_submit_sqes+0x6fe6/0x8610
[ 3127.490604]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3127.491658]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3127.492685]  ? find_held_lock+0x2c/0x110
[ 3127.493553]  ? io_submit_sqes+0x8610/0x8610
[ 3127.494469]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3127.495488]  ? wait_for_completion_io+0x270/0x270
[ 3127.496503]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3127.497485]  ? vfs_write+0x354/0xb10
[ 3127.498270]  ? fput_many+0x2f/0x1a0
[ 3127.499049]  ? ksys_write+0x1a9/0x260
[ 3127.499853]  ? __ia32_sys_read+0xb0/0xb0
[ 3127.500724]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3127.501846]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3127.502938]  do_syscall_64+0x33/0x40
[ 3127.503746]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3127.504814] RIP: 0033:0x7f282e625b19
[ 3127.505605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3127.509481] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3127.511084] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3127.512586] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3127.514107] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3127.515614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3127.517126] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
02:00:15 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
r2 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000500)={{r0}, "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"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x100000001)

02:00:15 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3127.576770] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:00:15 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:15 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x7, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3127.726151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:00:15 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40086604, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:00:15 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

02:00:15 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3127.787702] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled.
02:00:15 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

[ 3127.804046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3127.855266] FAULT_INJECTION: forcing a failure.
[ 3127.855266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3127.857961] CPU: 1 PID: 15443 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3127.859418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3127.861169] Call Trace:
[ 3127.861730]  dump_stack+0x107/0x167
[ 3127.862494]  should_fail.cold+0x5/0xa
[ 3127.863302]  _copy_to_iter+0x264/0x12d0
[ 3127.864146]  ? __up_read+0x19f/0x7a0
[ 3127.864936]  ? _copy_from_iter_nocache+0xd60/0xd60
[ 3127.865975]  ? __virt_addr_valid+0x170/0x5d0
[ 3127.866893]  ? __check_object_size+0x319/0x440
[ 3127.867850]  seq_read_iter+0xdcb/0x12b0
[ 3127.868693]  ? traverse.part.0+0x620/0x620
[ 3127.869586]  io_read+0x2dc/0x11e0
[ 3127.870333]  ? kiocb_done+0xc90/0xc90
[ 3127.871140]  ? mark_lock+0xf5/0x2df0
[ 3127.871227] FAULT_INJECTION: forcing a failure.
[ 3127.871227] name failslab, interval 1, probability 0, space 0, times 0
[ 3127.871923]  ? lock_chain_count+0x20/0x20
[ 3127.871953]  ? stack_trace_consume_entry+0x160/0x160
[ 3127.871983]  ? lock_acquire+0x197/0x470
[ 3127.872010]  ? __lock_acquire+0xbb1/0x5b00
[ 3127.877920]  io_issue_sqe+0x2e8a/0x77b0
[ 3127.878765]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3127.879870]  ? lock_chain_count+0x20/0x20
[ 3127.880740]  ? __is_insn_slot_addr+0x14c/0x290
[ 3127.881708]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3127.882813]  ? io_connect+0x610/0x610
[ 3127.883621]  ? lock_acquire+0x197/0x470
[ 3127.884459]  ? find_held_lock+0x2c/0x110
[ 3127.885317]  ? __fget_files+0x2cf/0x520
[ 3127.886165]  ? lock_downgrade+0x6d0/0x6d0
[ 3127.887040]  __io_queue_sqe+0x90/0x9d0
[ 3127.887861]  ? io_issue_sqe+0x77b0/0x77b0
[ 3127.888727]  ? __fget_files+0x2f8/0x520
[ 3127.889584]  ? io_prep_rw+0x7f5/0x1050
[ 3127.890406]  io_submit_sqes+0x44aa/0x8610
[ 3127.891311]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3127.892360]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3127.893372]  ? find_held_lock+0x2c/0x110
[ 3127.894241]  ? io_submit_sqes+0x8610/0x8610
[ 3127.895160]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3127.896181]  ? wait_for_completion_io+0x270/0x270
[ 3127.897203]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3127.898188]  ? vfs_write+0x354/0xb10
[ 3127.898981]  ? fput_many+0x2f/0x1a0
[ 3127.899750]  ? ksys_write+0x1a9/0x260
[ 3127.900555]  ? __ia32_sys_read+0xb0/0xb0
[ 3127.901411]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3127.902525]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3127.903614]  do_syscall_64+0x33/0x40
[ 3127.904398]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3127.905491] RIP: 0033:0x7f282e625b19
[ 3127.906284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3127.910180] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3127.911790] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3127.913302] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3127.914810] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3127.916305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3127.917815] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3127.919355] CPU: 0 PID: 15446 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3127.920822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3127.922567] Call Trace:
[ 3127.923124]  dump_stack+0x107/0x167
[ 3127.923887]  should_fail.cold+0x5/0xa
[ 3127.924690]  ? create_object.isra.0+0x3a/0xa20
[ 3127.925717]  should_failslab+0x5/0x20
[ 3127.926528]  kmem_cache_alloc+0x5b/0x310
[ 3127.927396]  create_object.isra.0+0x3a/0xa20
[ 3127.928326]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3127.929400]  __kmalloc_track_caller+0x177/0x370
[ 3127.930398]  ? security_context_to_sid_core+0xb4/0x890
[ 3127.931510]  kmemdup_nul+0x2d/0xa0
[ 3127.932301]  security_context_to_sid_core+0xb4/0x890
[ 3127.933377]  ? security_compute_sid.part.0+0x16e0/0x16e0
[ 3127.934517]  ? do_raw_spin_lock+0x121/0x260
[ 3127.935417]  ? rwlock_bug.part.0+0x90/0x90
[ 3127.936304]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3127.937313]  ? do_raw_spin_unlock+0x4f/0x220
[ 3127.938237]  ? _raw_spin_unlock+0x1a/0x30
[ 3127.939111]  security_context_to_sid+0x35/0x50
[ 3127.940068]  selinux_kernfs_init_security+0x19d/0x4c0
[ 3127.941138]  ? selinux_file_mprotect+0x610/0x610
[ 3127.942142]  ? find_held_lock+0x2c/0x110
[ 3127.942993]  ? __kernfs_new_node+0x2ad/0x860
[ 3127.943904]  ? lock_downgrade+0x6d0/0x6d0
[ 3127.944775]  ? rwlock_bug.part.0+0x90/0x90
[ 3127.945669]  security_kernfs_init_security+0x4e/0xb0
[ 3127.946737]  __kernfs_new_node+0x531/0x860
[ 3127.947634]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3127.948644]  ? cpumask_next+0x1f/0x30
[ 3127.949437]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3127.950429]  ? pcpu_alloc+0x12a/0x1240
[ 3127.951334]  kernfs_new_node+0x18d/0x250
[ 3127.952261]  kernfs_create_dir_ns+0x49/0x160
02:00:15 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3127.953198]  cgroup_mkdir+0x315/0xf50
[ 3127.954240]  ? cgroup_destroy_locked+0x710/0x710
[ 3127.955236]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3127.956126]  vfs_mkdir+0x493/0x750
[ 3127.956881]  do_mkdirat+0x150/0x2b0
[ 3127.957679]  ? user_path_create+0xf0/0xf0
[ 3127.958558]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3127.959672]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3127.960757]  do_syscall_64+0x33/0x40
[ 3127.961555]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3127.962663] RIP: 0033:0x7fd21301bb19
[ 3127.963471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3127.967357] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3127.968978] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3127.970498] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3127.972002] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3127.973507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3127.975016] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3128.069355] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled.
[ 3128.234388] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3128.305901] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:00:31 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:31 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:31 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:00:31 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

02:00:31 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4800)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

02:00:31 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3143.861268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:00:31 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2e, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:31 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40086607, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3143.888926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:00:31 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x52b, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3143.950730] FAULT_INJECTION: forcing a failure.
[ 3143.950730] name failslab, interval 1, probability 0, space 0, times 0
[ 3143.954113] CPU: 0 PID: 15483 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3143.955568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3143.957306] Call Trace:
[ 3143.957858]  dump_stack+0x107/0x167
[ 3143.958626]  should_fail.cold+0x5/0xa
[ 3143.959430]  should_failslab+0x5/0x20
[ 3143.959529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3143.960217]  __kmalloc_track_caller+0x79/0x370
[ 3143.960257]  ? sidtab_sid2str_get+0x17e/0x720
[ 3143.963077]  kmemdup+0x23/0x50
[ 3143.963756]  sidtab_sid2str_get+0x17e/0x720
[ 3143.964661]  sidtab_entry_to_string+0x33/0x110
[ 3143.965611]  security_sid_to_context_core+0x33c/0x5d0
[ 3143.966716]  selinux_kernfs_init_security+0x239/0x4c0
[ 3143.967798]  ? selinux_file_mprotect+0x610/0x610
[ 3143.968791]  ? find_held_lock+0x2c/0x110
[ 3143.969639]  ? __kernfs_new_node+0x2ad/0x860
[ 3143.970564]  ? rwlock_bug.part.0+0x90/0x90
[ 3143.971447]  security_kernfs_init_security+0x4e/0xb0
[ 3143.972511]  __kernfs_new_node+0x531/0x860
[ 3143.973390]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3143.973895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3143.974383]  ? cpumask_next+0x1f/0x30
[ 3143.976121]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3143.977090]  ? pcpu_alloc+0x12a/0x1240
[ 3143.977913]  kernfs_new_node+0x18d/0x250
[ 3143.978765]  kernfs_create_dir_ns+0x49/0x160
[ 3143.979689]  cgroup_mkdir+0x315/0xf50
[ 3143.980490]  ? cgroup_destroy_locked+0x710/0x710
[ 3143.981477]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3143.982344]  vfs_mkdir+0x493/0x750
[ 3143.983089]  do_mkdirat+0x150/0x2b0
[ 3143.983853]  ? user_path_create+0xf0/0xf0
[ 3143.984723]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3143.985813]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3143.986896]  do_syscall_64+0x33/0x40
[ 3143.987674]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3143.988742] RIP: 0033:0x7fd21301bb19
[ 3143.989511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3143.993325] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3143.994910] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3143.996392] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3143.997866] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3143.999358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3144.000843] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3144.017195] FAULT_INJECTION: forcing a failure.
[ 3144.017195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3144.018633] CPU: 1 PID: 15482 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3144.019424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3144.020375] Call Trace:
[ 3144.020682]  dump_stack+0x107/0x167
[ 3144.021102]  should_fail.cold+0x5/0xa
[ 3144.021538]  _copy_from_user+0x2e/0x1b0
[ 3144.021997]  iovec_from_user+0x141/0x400
[ 3144.022474]  __import_iovec+0x67/0x590
[ 3144.022929]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3144.023480]  io_import_iovec+0x581/0x1120
[ 3144.023962]  ? io_complete_rw+0x230/0x230
[ 3144.024443]  ? kiocb_done+0x16b/0xc90
[ 3144.024886]  io_read+0xe14/0x11e0
[ 3144.025294]  ? kiocb_done+0xc90/0xc90
[ 3144.025734]  ? mark_lock+0xf5/0x2df0
[ 3144.026173]  ? lock_chain_count+0x20/0x20
[ 3144.026653]  ? stack_trace_consume_entry+0x160/0x160
[ 3144.027235]  ? lock_acquire+0x197/0x470
[ 3144.027687]  ? __lock_acquire+0xbb1/0x5b00
[ 3144.028171]  io_issue_sqe+0x2e8a/0x77b0
[ 3144.028637]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3144.029257]  ? lock_chain_count+0x20/0x20
[ 3144.029731]  ? __is_insn_slot_addr+0x14c/0x290
[ 3144.030286]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3144.030881]  ? io_connect+0x610/0x610
[ 3144.031328]  ? lock_acquire+0x197/0x470
[ 3144.031788]  ? find_held_lock+0x2c/0x110
[ 3144.032251]  ? __fget_files+0x2cf/0x520
[ 3144.032706]  ? lock_downgrade+0x6d0/0x6d0
[ 3144.033181]  __io_queue_sqe+0x90/0x9d0
[ 3144.033622]  ? io_issue_sqe+0x77b0/0x77b0
[ 3144.034100]  ? __fget_files+0x2f8/0x520
[ 3144.034558]  ? io_prep_rw+0x7f5/0x1050
[ 3144.035009]  io_submit_sqes+0x44aa/0x8610
[ 3144.035495]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3144.036066]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3144.036621]  ? find_held_lock+0x2c/0x110
[ 3144.037085]  ? io_submit_sqes+0x8610/0x8610
[ 3144.037582]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3144.038145]  ? wait_for_completion_io+0x270/0x270
[ 3144.038697]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3144.039234]  ? vfs_write+0x354/0xb10
[ 3144.039670]  ? fput_many+0x2f/0x1a0
[ 3144.040092]  ? ksys_write+0x1a9/0x260
[ 3144.040524]  ? __ia32_sys_read+0xb0/0xb0
[ 3144.040996]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3144.041594]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3144.042191]  do_syscall_64+0x33/0x40
[ 3144.042616]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3144.043202] RIP: 0033:0x7f282e625b19
[ 3144.043623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3144.045770] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3144.046643] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3144.047466] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3144.048290] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3144.049106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3144.049924] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
02:00:31 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:31 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3144.151696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3144.169292] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3144.204641] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3160.172339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3160.192270] FAULT_INJECTION: forcing a failure.
[ 3160.192270] name failslab, interval 1, probability 0, space 0, times 0
[ 3160.193956] CPU: 1 PID: 15544 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3160.194884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3160.195990] Call Trace:
[ 3160.196345]  dump_stack+0x107/0x167
[ 3160.196828]  should_fail.cold+0x5/0xa
[ 3160.197336]  ? create_object.isra.0+0x3a/0xa20
[ 3160.197944]  should_failslab+0x5/0x20
[ 3160.198448]  kmem_cache_alloc+0x5b/0x310
[ 3160.199015]  create_object.isra.0+0x3a/0xa20
[ 3160.199600]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3160.200269]  __kmalloc_track_caller+0x177/0x370
02:00:47 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:00:47 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:00:47 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:47 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x6609, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:00:47 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
shmget(0x2, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

02:00:47 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

02:00:47 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:47 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
[ 3160.201095]  ? sidtab_sid2str_get+0x17e/0x720
[ 3160.201862]  kmemdup+0x23/0x50
[ 3160.202294]  sidtab_sid2str_get+0x17e/0x720
[ 3160.202883]  sidtab_entry_to_string+0x33/0x110
[ 3160.203489]  security_sid_to_context_core+0x33c/0x5d0
[ 3160.204205]  selinux_kernfs_init_security+0x239/0x4c0
[ 3160.204889]  ? selinux_file_mprotect+0x610/0x610
[ 3160.205525]  ? find_held_lock+0x2c/0x110
[ 3160.206076]  ? __kernfs_new_node+0x2ad/0x860
[ 3160.206668]  ? rwlock_bug.part.0+0x90/0x90
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 3160.207234]  security_kernfs_init_security+0x4e/0xb0
[ 3160.208093]  __kernfs_new_node+0x531/0x860
[ 3160.208661]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3160.209308]  ? cpumask_next+0x1f/0x30
[ 3160.209821]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3160.210434]  ? pcpu_alloc+0x12a/0x1240
[ 3160.210980]  kernfs_new_node+0x18d/0x250
[ 3160.211524]  kernfs_create_dir_ns+0x49/0x160
[ 3160.212124]  cgroup_mkdir+0x315/0xf50
[ 3160.212627]  ? cgroup_destroy_locked+0x710/0x710
[ 3160.213262]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3160.213824]  vfs_mkdir+0x493/0x750
[ 3160.214295]  do_mkdirat+0x150/0x2b0
[ 3160.214790]  ? user_path_create+0xf0/0xf0
[ 3160.215349]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3160.216067]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3160.216750]  do_syscall_64+0x33/0x40
[ 3160.217261]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3160.217947] RIP: 0033:0x7fd21301bb19
[ 3160.218448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3160.220877] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3160.221906] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3160.222885] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3160.224082] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3160.225269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3160.226463] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3160.262004] FAULT_INJECTION: forcing a failure.
[ 3160.262004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3160.265007] CPU: 0 PID: 15541 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3160.266583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3160.268465] Call Trace:
[ 3160.269065]  dump_stack+0x107/0x167
[ 3160.269889]  should_fail.cold+0x5/0xa
[ 3160.270761]  _copy_to_iter+0x264/0x12d0
[ 3160.271675]  ? __up_read+0x19f/0x7a0
[ 3160.272516]  ? _copy_from_iter_nocache+0xd60/0xd60
[ 3160.273621]  ? __virt_addr_valid+0x170/0x5d0
[ 3160.274624]  ? __check_object_size+0x319/0x440
[ 3160.275666]  seq_read_iter+0xdcb/0x12b0
[ 3160.276579]  ? traverse.part.0+0x620/0x620
[ 3160.277534]  io_read+0x2dc/0x11e0
[ 3160.278332]  ? kiocb_done+0xc90/0xc90
[ 3160.279195]  ? mark_lock+0xf5/0x2df0
[ 3160.280045]  ? lock_chain_count+0x20/0x20
[ 3160.280991]  ? stack_trace_consume_entry+0x160/0x160
[ 3160.282145]  ? lock_acquire+0x197/0x470
[ 3160.283063]  ? __lock_acquire+0xbb1/0x5b00
[ 3160.284027]  io_issue_sqe+0x2e8a/0x77b0
[ 3160.284937]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3160.286126]  ? lock_chain_count+0x20/0x20
[ 3160.287073]  ? __is_insn_slot_addr+0x14c/0x290
[ 3160.288099]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3160.289271]  ? io_connect+0x610/0x610
[ 3160.290127]  ? lock_acquire+0x197/0x470
[ 3160.291027]  ? find_held_lock+0x2c/0x110
[ 3160.291935]  ? __fget_files+0x2cf/0x520
[ 3160.292826]  ? lock_downgrade+0x6d0/0x6d0
[ 3160.293759]  __io_queue_sqe+0x90/0x9d0
[ 3160.294640]  ? io_issue_sqe+0x77b0/0x77b0
[ 3160.295561]  ? __fget_files+0x2f8/0x520
[ 3160.296454]  ? io_prep_rw+0x7f5/0x1050
[ 3160.297331]  io_submit_sqes+0x44aa/0x8610
[ 3160.298286]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3160.299398]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3160.300472]  ? find_held_lock+0x2c/0x110
[ 3160.301389]  ? io_submit_sqes+0x8610/0x8610
[ 3160.302361]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3160.303442]  ? wait_for_completion_io+0x270/0x270
[ 3160.304520]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3160.305558]  ? vfs_write+0x354/0xb10
[ 3160.306391]  ? fput_many+0x2f/0x1a0
[ 3160.307215]  ? ksys_write+0x1a9/0x260
[ 3160.308068]  ? __ia32_sys_read+0xb0/0xb0
[ 3160.308971]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3160.310129]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3160.311277]  do_syscall_64+0x33/0x40
[ 3160.312100]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3160.313234] RIP: 0033:0x7f282e625b19
[ 3160.314062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3160.318122] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3160.319818] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3160.321398] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3160.322995] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3160.324566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3160.326122] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3160.374905] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3160.397073] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:00:48 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

02:00:48 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3160.507424] FAULT_INJECTION: forcing a failure.
[ 3160.507424] name failslab, interval 1, probability 0, space 0, times 0
[ 3160.509450] CPU: 1 PID: 15569 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3160.510453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3160.511653] Call Trace:
[ 3160.512038]  dump_stack+0x107/0x167
[ 3160.512565]  should_fail.cold+0x5/0xa
[ 3160.513113]  ? __kernfs_iattrs+0xbc/0x470
[ 3160.513714]  should_failslab+0x5/0x20
[ 3160.514264]  kmem_cache_alloc+0x5b/0x310
[ 3160.514855]  __kernfs_iattrs+0xbc/0x470
[ 3160.515427]  kernfs_xattr_set+0x2b/0x80
[ 3160.516001]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3160.516750]  ? selinux_file_mprotect+0x610/0x610
[ 3160.517435]  ? find_held_lock+0x2c/0x110
[ 3160.518027]  ? __kernfs_new_node+0x2ad/0x860
[ 3160.518678]  ? rwlock_bug.part.0+0x90/0x90
[ 3160.519340]  security_kernfs_init_security+0x4e/0xb0
[ 3160.520066]  __kernfs_new_node+0x531/0x860
[ 3160.520682]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3160.521369]  ? cpumask_next+0x1f/0x30
[ 3160.521928]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3160.522587]  ? pcpu_alloc+0x12a/0x1240
[ 3160.523167]  kernfs_new_node+0x18d/0x250
[ 3160.523757]  kernfs_create_dir_ns+0x49/0x160
[ 3160.524391]  cgroup_mkdir+0x315/0xf50
[ 3160.524933]  ? cgroup_destroy_locked+0x710/0x710
[ 3160.525599]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3160.526187]  vfs_mkdir+0x493/0x750
[ 3160.526696]  do_mkdirat+0x150/0x2b0
[ 3160.527218]  ? user_path_create+0xf0/0xf0
[ 3160.527812]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3160.528562]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3160.529292]  do_syscall_64+0x33/0x40
[ 3160.529816]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3160.530551] RIP: 0033:0x7fd21301bb19
[ 3160.531079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3160.533680] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3160.534766] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3160.535769] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3160.536787] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3160.537809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3160.538826] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
02:00:48 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3160.579082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3160.639978] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3160.659306] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:00:48 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40087602, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:00:48 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e5000100000000002e2f66656c6530002b44d5d8e079e91819504f990a8ac1574bfda502adcd847bd19e34fea61510f717a190912bb6055614a00593c28d028433c7fef806af56d4ee95195d2381b6879ef0886778ccb14f328a75fd548eb56ad09cff907d3bcb291a9f135af64a36adeebd189af906c39339f07fd085423b665e34ffedf810c5f403a079237cac9fbbe975d7f39a16f89d9d0a82cfdde5c271144915c698c2eb0caa4fb4a098dbc84116d939d245077f3fd68dce5f4601d4305899073bd83fb36e5657156c72872ccb4e3ef210d78a1eabab13f0a18ca0849b90664c0e852a8e80532170752c6d87d24ce17e07d0e66a920080fbe710c4d88c7f5a65b1b0f43389f55167bec8c06b5fc9a9ec0ec1942286a0e798bf44e837560f0b9ddfa0437e520f4743deeeda3a1aa129df3d875df6c93c9b64858c41b650f347777116a6a36a914364e52e1d492dee7ecbba60149aed350f371e6ebe9312abec53af77fc7453e1279e"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:00:48 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3160.729239] FAULT_INJECTION: forcing a failure.
[ 3160.729239] name failslab, interval 1, probability 0, space 0, times 0
[ 3160.730950] CPU: 1 PID: 15585 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3160.731909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3160.733079] Call Trace:
[ 3160.733457]  dump_stack+0x107/0x167
[ 3160.733970]  should_fail.cold+0x5/0xa
[ 3160.734508]  ? __kernfs_iattrs+0xbc/0x470
[ 3160.735102]  should_failslab+0x5/0x20
[ 3160.735645]  kmem_cache_alloc+0x5b/0x310
[ 3160.736212]  __kernfs_iattrs+0xbc/0x470
[ 3160.736783]  kernfs_xattr_set+0x2b/0x80
[ 3160.737383]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3160.738161]  ? selinux_file_mprotect+0x610/0x610
[ 3160.738938]  ? find_held_lock+0x2c/0x110
[ 3160.739519]  ? __kernfs_new_node+0x2ad/0x860
[ 3160.740139]  ? rwlock_bug.part.0+0x90/0x90
[ 3160.740737]  security_kernfs_init_security+0x4e/0xb0
[ 3160.741442]  __kernfs_new_node+0x531/0x860
[ 3160.742049]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3160.742729]  ? cpumask_next+0x1f/0x30
[ 3160.743268]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3160.743910]  ? pcpu_alloc+0x12a/0x1240
[ 3160.744462]  kernfs_new_node+0x18d/0x250
[ 3160.745025]  kernfs_create_dir_ns+0x49/0x160
[ 3160.745655]  cgroup_mkdir+0x315/0xf50
[ 3160.746197]  ? cgroup_destroy_locked+0x710/0x710
[ 3160.746870]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3160.747448]  vfs_mkdir+0x493/0x750
[ 3160.747945]  do_mkdirat+0x150/0x2b0
[ 3160.748453]  ? user_path_create+0xf0/0xf0
[ 3160.749031]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3160.749768]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3160.750507]  do_syscall_64+0x33/0x40
[ 3160.751028]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3160.751746] RIP: 0033:0x7fd21301bb19
[ 3160.752267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3160.754834] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3160.755881] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3160.756873] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3160.757863] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3160.758862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3160.759859] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3160.778258] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled.
02:00:48 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3160.807232] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3160.820671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3160.844253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3160.901841] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3161.076355] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled.
02:01:04 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

02:01:04 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:01:04 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x400c6615, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:01:04 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

02:01:04 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 28)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

02:01:04 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:01:04 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:01:04 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x8e, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3176.417291] FAULT_INJECTION: forcing a failure.
[ 3176.417291] name failslab, interval 1, probability 0, space 0, times 0
[ 3176.420428] CPU: 0 PID: 15615 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3176.422216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3176.424370] Call Trace:
[ 3176.425059]  dump_stack+0x107/0x167
[ 3176.426004]  should_fail.cold+0x5/0xa
[ 3176.427001]  ? kvmalloc_node+0x119/0x170
[ 3176.428069]  should_failslab+0x5/0x20
[ 3176.429056]  __kmalloc_node+0x76/0x420
[ 3176.430066]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3176.431324]  kvmalloc_node+0x119/0x170
[ 3176.432327]  simple_xattr_alloc+0x43/0xa0
[ 3176.433394]  simple_xattr_set+0x75/0x610
[ 3176.434457]  kernfs_xattr_set+0x50/0x80
[ 3176.435500]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3176.436844]  ? selinux_file_mprotect+0x610/0x610
[ 3176.438070]  ? find_held_lock+0x2c/0x110
[ 3176.439130]  ? __kernfs_new_node+0x2ad/0x860
[ 3176.440272]  ? rwlock_bug.part.0+0x90/0x90
[ 3176.441365]  security_kernfs_init_security+0x4e/0xb0
[ 3176.442678]  __kernfs_new_node+0x531/0x860
[ 3176.443796]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3176.445060]  ? cpumask_next+0x1f/0x30
[ 3176.446054]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3176.447272]  ? pcpu_alloc+0x12a/0x1240
[ 3176.448172]  kernfs_new_node+0x18d/0x250
[ 3176.449116]  kernfs_create_dir_ns+0x49/0x160
[ 3176.450107]  cgroup_mkdir+0x315/0xf50
[ 3176.450968]  ? cgroup_destroy_locked+0x710/0x710
[ 3176.452050]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3176.452981]  vfs_mkdir+0x493/0x750
[ 3176.453785]  do_mkdirat+0x150/0x2b0
[ 3176.454604]  ? user_path_create+0xf0/0xf0
[ 3176.455555]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3176.456728]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3176.457884]  do_syscall_64+0x33/0x40
[ 3176.458722]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3176.459868] RIP: 0033:0x7fd21301bb19
[ 3176.460707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3176.464801] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3176.466187] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3176.466491] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3176.466509] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3176.470909] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3176.472503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3176.474094] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3176.482191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3176.498029] FAULT_INJECTION: forcing a failure.
[ 3176.498029] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3176.501096] CPU: 0 PID: 15614 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3176.502691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3176.504544] Call Trace:
[ 3176.505146]  dump_stack+0x107/0x167
[ 3176.505971]  should_fail.cold+0x5/0xa
[ 3176.506835]  _copy_from_user+0x2e/0x1b0
[ 3176.507752]  iovec_from_user+0x141/0x400
[ 3176.508674]  __import_iovec+0x67/0x590
[ 3176.509551]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3176.510645]  io_import_iovec+0x581/0x1120
[ 3176.511605]  ? io_complete_rw+0x230/0x230
[ 3176.512537]  ? kiocb_done+0x16b/0xc90
[ 3176.513393]  io_read+0xe14/0x11e0
[ 3176.514185]  ? kiocb_done+0xc90/0xc90
[ 3176.515033]  ? mark_lock+0xf5/0x2df0
[ 3176.515883]  ? lock_chain_count+0x20/0x20
[ 3176.516805]  ? stack_trace_consume_entry+0x160/0x160
[ 3176.517947]  ? lock_acquire+0x197/0x470
[ 3176.518849]  ? __lock_acquire+0xbb1/0x5b00
[ 3176.519804]  io_issue_sqe+0x2e8a/0x77b0
[ 3176.520702]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3176.521866]  ? lock_chain_count+0x20/0x20
[ 3176.522791]  ? __is_insn_slot_addr+0x14c/0x290
[ 3176.523820]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3176.524994]  ? io_connect+0x610/0x610
[ 3176.525857]  ? lock_acquire+0x197/0x470
[ 3176.526763]  ? find_held_lock+0x2c/0x110
[ 3176.527700]  ? __fget_files+0x2cf/0x520
[ 3176.528610]  ? lock_downgrade+0x6d0/0x6d0
[ 3176.529551]  __io_queue_sqe+0x90/0x9d0
[ 3176.530448]  ? io_issue_sqe+0x77b0/0x77b0
[ 3176.531387]  ? __fget_files+0x2f8/0x520
[ 3176.532286]  ? io_prep_rw+0x7f5/0x1050
[ 3176.533167]  io_submit_sqes+0x44aa/0x8610
[ 3176.534135]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3176.535265]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3176.536357]  ? find_held_lock+0x2c/0x110
[ 3176.537273]  ? io_submit_sqes+0x8610/0x8610
[ 3176.538257]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3176.539350]  ? wait_for_completion_io+0x270/0x270
[ 3176.540448]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3176.541502]  ? vfs_write+0x354/0xb10
[ 3176.542346]  ? fput_many+0x2f/0x1a0
[ 3176.543175]  ? ksys_write+0x1a9/0x260
[ 3176.544052]  ? __ia32_sys_read+0xb0/0xb0
[ 3176.544975]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3176.546152]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3176.547342]  do_syscall_64+0x33/0x40
[ 3176.548182]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3176.549331] RIP: 0033:0x7f282e625b19
[ 3176.550170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3176.554305] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3176.556030] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3176.557643] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3176.559251] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3176.560854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3176.562448] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3176.579953] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:01:04 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
r3 = getpid()
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x2, @buffer={0x0, 0x100c, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DVD_READ_STRUCT(r4, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x9, 0x20, 0x7, 0x0, 0x10000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0x20}, 0x0, 0xff, 0x7fffffff, 0x7, 0xff, 0x7, 0x8, 0x0, 0x6, 0x0, 0x6}, r3, 0x4, r4, 0x5)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x100000001)

02:01:04 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:01:04 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 29)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

02:01:04 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x300, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3176.721126] FAULT_INJECTION: forcing a failure.
[ 3176.721126] name failslab, interval 1, probability 0, space 0, times 0
[ 3176.722783] CPU: 1 PID: 15652 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3176.723745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3176.724899] Call Trace:
[ 3176.725273]  dump_stack+0x107/0x167
[ 3176.725780]  should_fail.cold+0x5/0xa
[ 3176.726320]  ? create_object.isra.0+0x3a/0xa20
[ 3176.726953]  should_failslab+0x5/0x20
[ 3176.727497]  kmem_cache_alloc+0x5b/0x310
[ 3176.728074]  ? lock_downgrade+0x6d0/0x6d0
[ 3176.728657]  create_object.isra.0+0x3a/0xa20
[ 3176.729273]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3176.729976]  __kmalloc_node+0x1ae/0x420
[ 3176.730538]  kvmalloc_node+0x119/0x170
[ 3176.731083]  simple_xattr_alloc+0x43/0xa0
[ 3176.731678]  simple_xattr_set+0x75/0x610
[ 3176.732248]  kernfs_xattr_set+0x50/0x80
[ 3176.732819]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3176.733540]  ? selinux_file_mprotect+0x610/0x610
[ 3176.734198]  ? find_held_lock+0x2c/0x110
[ 3176.734769]  ? __kernfs_new_node+0x2ad/0x860
[ 3176.735395]  ? rwlock_bug.part.0+0x90/0x90
[ 3176.735981]  security_kernfs_init_security+0x4e/0xb0
[ 3176.736694]  __kernfs_new_node+0x531/0x860
[ 3176.737289]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3176.737949]  ? cpumask_next+0x1f/0x30
[ 3176.738476]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3176.739126]  ? pcpu_alloc+0x12a/0x1240
[ 3176.739673]  kernfs_new_node+0x18d/0x250
[ 3176.740249]  kernfs_create_dir_ns+0x49/0x160
[ 3176.740865]  cgroup_mkdir+0x315/0xf50
[ 3176.741403]  ? cgroup_destroy_locked+0x710/0x710
[ 3176.742056]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3176.742630]  vfs_mkdir+0x493/0x750
[ 3176.743128]  do_mkdirat+0x150/0x2b0
[ 3176.743637]  ? user_path_create+0xf0/0xf0
[ 3176.744209]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3176.744941]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3176.745659]  do_syscall_64+0x33/0x40
[ 3176.746184]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3176.746902] RIP: 0033:0x7fd21301bb19
[ 3176.747433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3176.750015] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3176.751072] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3176.752068] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3176.753076] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3176.754097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3176.755115] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3176.764638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3176.795979] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
02:01:04 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 3176.885571] FAULT_INJECTION: forcing a failure.
[ 3176.885571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3176.887113] CPU: 1 PID: 15663 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3176.888073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3176.889008] Call Trace:
[ 3176.889323]  dump_stack+0x107/0x167
[ 3176.889839]  should_fail.cold+0x5/0xa
[ 3176.890362]  _copy_from_user+0x2e/0x1b0
[ 3176.890914]  iovec_from_user+0x141/0x400
[ 3176.891482]  __import_iovec+0x67/0x590
[ 3176.892021]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3176.892703]  io_import_iovec+0x581/0x1120
[ 3176.893279]  ? io_complete_rw+0x230/0x230
[ 3176.893856]  ? kiocb_done+0x16b/0xc90
[ 3176.894386]  io_read+0xe14/0x11e0
[ 3176.894879]  ? __is_insn_slot_addr+0x14c/0x290
[ 3176.895522]  ? kiocb_done+0xc90/0xc90
[ 3176.896049]  ? mark_lock+0xf5/0x2df0
[ 3176.896559]  ? register_lock_class+0xbb/0x17b0
[ 3176.897193]  ? arch_stack_walk+0x99/0xf0
[ 3176.897758]  ? lock_chain_count+0x20/0x20
[ 3176.898331]  ? is_dynamic_key+0x1e0/0x1e0
[ 3176.898921]  ? __lock_acquire+0x1657/0x5b00
[ 3176.899539]  ? __lock_acquire+0xbb1/0x5b00
[ 3176.900128]  io_issue_sqe+0x2e8a/0x77b0
[ 3176.900681]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3176.901406]  ? lock_chain_count+0x20/0x20
[ 3176.901988]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3176.902720]  ? io_connect+0x610/0x610
[ 3176.903251]  ? lock_acquire+0x197/0x470
[ 3176.903790]  ? find_held_lock+0x2c/0x110
[ 3176.904348]  ? __fget_files+0x2cf/0x520
[ 3176.904907]  ? lock_downgrade+0x6d0/0x6d0
[ 3176.905485]  __io_queue_sqe+0x90/0x9d0
[ 3176.906027]  ? io_issue_sqe+0x77b0/0x77b0
[ 3176.906603]  ? __fget_files+0x2f8/0x520
[ 3176.907155]  ? io_prep_rw+0x7f5/0x1050
[ 3176.907708]  io_submit_sqes+0x44aa/0x8610
[ 3176.908301]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3176.909008]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3176.909677]  ? find_held_lock+0x2c/0x110
[ 3176.910240]  ? io_submit_sqes+0x8610/0x8610
[ 3176.910844]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3176.911535]  ? wait_for_completion_io+0x270/0x270
[ 3176.912212]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3176.912856]  ? vfs_write+0x354/0xb10
[ 3176.913372]  ? fput_many+0x2f/0x1a0
[ 3176.913879]  ? ksys_write+0x1a9/0x260
[ 3176.914405]  ? __ia32_sys_read+0xb0/0xb0
[ 3176.914965]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3176.915710]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3176.916427]  do_syscall_64+0x33/0x40
[ 3176.916946]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3176.917650] RIP: 0033:0x7f282e625b19
[ 3176.918167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3176.920375] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3176.921185] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3176.921948] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3176.922752] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3176.923568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3176.924372] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
[ 3176.945246] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3176.994843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:01:04 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2b05, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

02:01:04 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x40106614, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

02:01:04 executing program 0:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

[ 3177.020892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3177.036691] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:01:04 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 30)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

02:01:04 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3177.211282] FAULT_INJECTION: forcing a failure.
[ 3177.211282] name failslab, interval 1, probability 0, space 0, times 0
[ 3177.214085] CPU: 0 PID: 15680 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3177.215653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3177.217513] Call Trace:
[ 3177.218113]  dump_stack+0x107/0x167
[ 3177.218934]  should_fail.cold+0x5/0xa
[ 3177.219814]  should_failslab+0x5/0x20
[ 3177.220675]  __kmalloc_track_caller+0x79/0x370
[ 3177.221707]  ? simple_xattr_set+0x93/0x610
[ 3177.222677]  kstrdup+0x36/0x70
[ 3177.223417]  simple_xattr_set+0x93/0x610
[ 3177.224343]  kernfs_xattr_set+0x50/0x80
[ 3177.225249]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3177.226414]  ? selinux_file_mprotect+0x610/0x610
[ 3177.227499]  ? find_held_lock+0x2c/0x110
[ 3177.228409]  ? __kernfs_new_node+0x2ad/0x860
[ 3177.229407]  ? rwlock_bug.part.0+0x90/0x90
[ 3177.230368]  security_kernfs_init_security+0x4e/0xb0
[ 3177.231527]  __kernfs_new_node+0x531/0x860
[ 3177.232530]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3177.233600]  ? cpumask_next+0x1f/0x30
[ 3177.234483]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3177.235542]  ? pcpu_alloc+0x12a/0x1240
[ 3177.236441]  kernfs_new_node+0x18d/0x250
[ 3177.237364]  kernfs_create_dir_ns+0x49/0x160
[ 3177.238385]  cgroup_mkdir+0x315/0xf50
[ 3177.239267]  ? cgroup_destroy_locked+0x710/0x710
[ 3177.240377]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3177.241314]  vfs_mkdir+0x493/0x750
[ 3177.242144]  do_mkdirat+0x150/0x2b0
[ 3177.242978]  ? user_path_create+0xf0/0xf0
[ 3177.243951]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3177.245133]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3177.246310]  do_syscall_64+0x33/0x40
[ 3177.247149]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3177.248333] RIP: 0033:0x7fd21301bb19
[ 3177.249177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3177.253382] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3177.255096] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3177.256709] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3177.258304] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3177.259926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3177.261536] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
[ 3177.264114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:01:04 executing program 7:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700))
r8 = socket$inet(0x2, 0xa, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0)

[ 3177.351579] FAULT_INJECTION: forcing a failure.
[ 3177.351579] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3177.352971] CPU: 1 PID: 15692 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 3177.353758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3177.354717] Call Trace:
[ 3177.355022]  dump_stack+0x107/0x167
[ 3177.355440]  should_fail.cold+0x5/0xa
[ 3177.355879]  _copy_to_iter+0x264/0x12d0
[ 3177.356351]  ? __up_read+0x19f/0x7a0
[ 3177.356774]  ? _copy_from_iter_nocache+0xd60/0xd60
[ 3177.357339]  ? __virt_addr_valid+0x170/0x5d0
[ 3177.357837]  ? __check_object_size+0x319/0x440
[ 3177.358357]  seq_read_iter+0xdcb/0x12b0
[ 3177.358815]  ? traverse.part.0+0x620/0x620
[ 3177.359301]  io_read+0x2dc/0x11e0
[ 3177.359699]  ? kiocb_done+0xc90/0xc90
[ 3177.360128]  ? mark_lock+0xf5/0x2df0
[ 3177.360552]  ? lock_chain_count+0x20/0x20
[ 3177.361025]  ? stack_trace_consume_entry+0x160/0x160
[ 3177.361603]  ? lock_acquire+0x197/0x470
[ 3177.362053]  ? __lock_acquire+0xbb1/0x5b00
[ 3177.362534]  io_issue_sqe+0x2e8a/0x77b0
[ 3177.362989]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3177.363592]  ? lock_chain_count+0x20/0x20
[ 3177.364061]  ? __is_insn_slot_addr+0x14c/0x290
[ 3177.364578]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3177.365172]  ? io_connect+0x610/0x610
[ 3177.365606]  ? lock_acquire+0x197/0x470
[ 3177.366052]  ? find_held_lock+0x2c/0x110
[ 3177.366516]  ? __fget_files+0x2cf/0x520
[ 3177.366968]  ? lock_downgrade+0x6d0/0x6d0
[ 3177.367447]  __io_queue_sqe+0x90/0x9d0
[ 3177.367891]  ? io_issue_sqe+0x77b0/0x77b0
[ 3177.368359]  ? __fget_files+0x2f8/0x520
[ 3177.368812]  ? io_prep_rw+0x7f5/0x1050
[ 3177.369253]  io_submit_sqes+0x44aa/0x8610
[ 3177.369735]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 3177.370298]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 3177.370849]  ? find_held_lock+0x2c/0x110
[ 3177.371320]  ? io_submit_sqes+0x8610/0x8610
[ 3177.371817]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3177.372366]  ? wait_for_completion_io+0x270/0x270
[ 3177.372915]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3177.373437]  ? vfs_write+0x354/0xb10
[ 3177.373855]  ? fput_many+0x2f/0x1a0
[ 3177.374267]  ? ksys_write+0x1a9/0x260
[ 3177.374697]  ? __ia32_sys_read+0xb0/0xb0
[ 3177.375157]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3177.375752]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3177.376334]  do_syscall_64+0x33/0x40
[ 3177.376752]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3177.377333] RIP: 0033:0x7f282e625b19
[ 3177.377753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3177.379836] RSP: 002b:00007f282bb9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3177.380694] RAX: ffffffffffffffda RBX: 00007f282e738f60 RCX: 00007f282e625b19
[ 3177.381498] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 3177.382301] RBP: 00007f282bb9b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3177.383105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3177.383917] R13: 00007ffe9fdcad8f R14: 00007f282bb9b300 R15: 0000000000022000
02:01:05 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4800, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3177.412633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:01:05 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3177.431232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 3177.480855] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3177.496829] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
02:01:05 executing program 2:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
pipe2(&(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r8, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2)

02:01:05 executing program 3:
r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1}, 0x6)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000400)={0x0, 0x4166, 0x20, 0x0, 0x163, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0))
syz_io_uring_setup(0x77bb, &(0x7f0000000480)={0x0, 0xe07b, 0x2, 0x2, 0x377}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000700)=<r10=>0x0)
r11 = socket$inet(0x2, 0xa, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000007c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000740)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x2)

02:01:05 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
recvmsg$unix(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/48, 0x30}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/42, 0x2a}, {&(0x7f0000001740)=""/177, 0xb1}], 0x6, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000010)
r6 = dup3(r2, r1, 0x80000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3, 0x35, 0x5, 0x7f, 0x0, 0x3, 0x10, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000440), 0x2}, 0x4000, 0x1, 0xe858, 0x3, 0x80000002, 0x5, 0xffff, 0x0, 0x1, 0x0, 0x1ff}, r5, 0xc, r6, 0x0)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x410000)
sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x36}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x204200, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00')
sendfile(r3, r8, 0x0, 0x100000001)

02:01:05 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b3003000000000000"])
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4c00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000d7820fd511277b8d26a092a16df7188ab2de8299473182cae4ec1a67a4aad1a81288c1e54e487efe83964fedd641f83b556c769fb437d42e00"/114, @ANYRES32=0x0, @ANYBLOB="0c000800ef3a6f000000952e"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x492, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="07000000000000002e2f66699d95d9ad"])
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x200, @private1, 0x6}, 0x1c)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8)

[ 3177.542465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.
02:01:05 executing program 4:
r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x4, 0x0, 0x0, 0x1000095, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x5349, 0x0, 0xffffffd6, 0x6, 0x1}, 0x7)
mkdirat(r1, 0x0, 0x2)
lseek(r1, 0xfa2b, 0x0)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'security\x00', 0x0, [0x4, 0x9, 0x4, 0xdb75, 0x4]}, &(0x7f0000000680)=0x54)
perf_event_open(&(0x7f0000001d80)={0x1, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 31)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1])
chown(&(0x7f0000000500)='./file0\x00', 0xee00, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x88)
getresuid(&(0x7f0000000340)=<r3=>0x0, &(0x7f00000003c0), &(0x7f0000000400))
symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00')
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0xffffffffffffffff, r4, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x0, &(0x7f00000000c0), 0x2010004, &(0x7f0000000780)={[{@discard}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv0}], [{@fowner_lt={'fowner<', r3}}, {@audit}, {@smackfsroot}, {@permit_directio}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security\x00'}}, {@fowner_gt={'fowner>', r4}}]})

[ 3177.613615] FAULT_INJECTION: forcing a failure.
[ 3177.613615] name failslab, interval 1, probability 0, space 0, times 0
[ 3177.615092] CPU: 1 PID: 15718 Comm: syz-executor.4 Not tainted 5.10.232 #1
[ 3177.615894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3177.616837] Call Trace:
[ 3177.617140]  dump_stack+0x107/0x167
[ 3177.617552]  should_fail.cold+0x5/0xa
[ 3177.617984]  ? create_object.isra.0+0x3a/0xa20
[ 3177.618504]  should_failslab+0x5/0x20
[ 3177.618944]  kmem_cache_alloc+0x5b/0x310
[ 3177.619416]  create_object.isra.0+0x3a/0xa20
[ 3177.619912]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3177.620491]  __kmalloc_track_caller+0x177/0x370
[ 3177.621021]  ? simple_xattr_set+0x93/0x610
[ 3177.621505]  kstrdup+0x36/0x70
[ 3177.621868]  simple_xattr_set+0x93/0x610
[ 3177.622336]  kernfs_xattr_set+0x50/0x80
[ 3177.622801]  selinux_kernfs_init_security+0x26d/0x4c0
[ 3177.623392]  ? selinux_file_mprotect+0x610/0x610
[ 3177.623930]  ? find_held_lock+0x2c/0x110
[ 3177.624392]  ? __kernfs_new_node+0x2ad/0x860
[ 3177.624897]  ? rwlock_bug.part.0+0x90/0x90
[ 3177.625381]  security_kernfs_init_security+0x4e/0xb0
[ 3177.625956]  __kernfs_new_node+0x531/0x860
[ 3177.626436]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3177.626977]  ? cpumask_next+0x1f/0x30
[ 3177.627418]  ? kmemleak_alloc_percpu+0xaf/0x100
[ 3177.627957]  ? pcpu_alloc+0x12a/0x1240
[ 3177.628402]  kernfs_new_node+0x18d/0x250
[ 3177.628864]  kernfs_create_dir_ns+0x49/0x160
[ 3177.629365]  cgroup_mkdir+0x315/0xf50
[ 3177.629799]  ? cgroup_destroy_locked+0x710/0x710
[ 3177.630336]  kernfs_iop_mkdir+0x14d/0x1e0
[ 3177.630806]  vfs_mkdir+0x493/0x750
[ 3177.631219]  do_mkdirat+0x150/0x2b0
[ 3177.631636]  ? user_path_create+0xf0/0xf0
[ 3177.632112]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3177.632673]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3177.633256]  do_syscall_64+0x33/0x40
[ 3177.633677]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3177.634256] RIP: 0033:0x7fd21301bb19
[ 3177.634675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3177.636771] RSP: 002b:00007fd210591188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 3177.637640] RAX: ffffffffffffffda RBX: 00007fd21312ef60 RCX: 00007fd21301bb19
[ 3177.638454] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000005
[ 3177.639271] RBP: 00007fd2105911d0 R08: 0000000000000000 R09: 0000000000000000
[ 3177.640080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3177.640888] R13: 00007ffd7583d62f R14: 00007fd210591300 R15: 0000000000022000
02:01:05 executing program 1:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, 0x0, 0x2, 0x0)
pwrite64(r1, &(0x7f00000003c0)="cc5ec2d56cdacc3c4b9bfce8c0e8de5ed835b6ae12cd7f4e962e123cc4ef1ae7047276d83102526741bfa47e71a937432ce223129a32b8e6ad286991b5ec5d21f11f60f15566e97be19d47", 0x4b, 0x79)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000002)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000340), 0x0)
shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)

02:01:05 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)='./file1\x00', 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x161001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b80)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x40040d5}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c)
r2 = getpgrp(0x0)
tgkill(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="005ff6916b3a062c2b8b01b2a6"])
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2b, 0x7, 0x1d, 0x6, 0x81, 0x2, 0x6, 0x2, 0x2e2, 0x38, 0x3c5, 0x9, 0x4, 0x20, 0x1, 0x6, 0xfff, 0x1}, [{0x0, 0xf97, 0x80000001, 0x6, 0xe708, 0x6, 0x0, 0x4}, {0x4, 0x0, 0x100, 0x8001, 0x8, 0x20, 0xf59, 0x3ff}], "6cb109da8f1d77274dde004161d76e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x587)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
fcntl$getown(r4, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
unshare(0x48020200)

[ 3177.739491] tmpfs: Unknown parameter 'ÿÿ00000000000000000000005'
[ 3177.777325] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 3189.742103] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff8880481ab000 (size 144):
  comm "syz-executor.4", pid 15615, jiffies 4297843328 (age 26.882s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 60 ad 70 67 00 00 00 00  ........`.pg....
    44 38 e7 05 00 00 00 00 60 ad 70 67 00 00 00 00  D8......`.pg....
  backtrace:
    [<000000009e6ad11f>] __kernfs_iattrs+0xbc/0x470
    [<0000000091a411b1>] kernfs_xattr_set+0x2b/0x80
    [<000000009f471a81>] selinux_kernfs_init_security+0x26d/0x4c0
    [<00000000eb8e8c36>] security_kernfs_init_security+0x4e/0xb0
    [<000000004a4944cb>] __kernfs_new_node+0x531/0x860
    [<00000000dfd5a38d>] kernfs_new_node+0x18d/0x250
    [<0000000021f045a7>] kernfs_create_dir_ns+0x49/0x160
    [<00000000437520c1>] cgroup_mkdir+0x315/0xf50
    [<00000000a1804813>] kernfs_iop_mkdir+0x14d/0x1e0
    [<00000000012a67b0>] vfs_mkdir+0x493/0x750
    [<00000000c6aef934>] do_mkdirat+0x150/0x2b0
    [<00000000c822c9fe>] do_syscall_64+0x33/0x40
    [<00000000e5666ce1>] entry_SYSCALL_64_after_hwframe+0x67/0xd1

BUG: memory leak
unreferenced object 0xffff8880481ab0d0 (size 144):
  comm "syz-executor.4", pid 15680, jiffies 4297844122 (age 26.088s)
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 60 ad 70 67 00 00 00 00  ........`.pg....
    df 3f 3a 35 00 00 00 00 60 ad 70 67 00 00 00 00  .?:5....`.pg....
  backtrace:
    [<000000009e6ad11f>] __kernfs_iattrs+0xbc/0x470
    [<0000000091a411b1>] kernfs_xattr_set+0x2b/0x80
    [<000000009f471a81>] selinux_kernfs_init_security+0x26d/0x4c0
    [<00000000eb8e8c36>] security_kernfs_init_security+0x4e/0xb0
    [<000000004a4944cb>] __kernfs_new_node+0x531/0x860
    [<00000000dfd5a38d>] kernfs_new_node+0x18d/0x250
    [<0000000021f045a7>] kernfs_create_dir_ns+0x49/0x160
    [<00000000437520c1>] cgroup_mkdir+0x315/0xf50
    [<00000000a1804813>] kernfs_iop_mkdir+0x14d/0x1e0
    [<00000000012a67b0>] vfs_mkdir+0x493/0x750
    [<00000000c6aef934>] do_mkdirat+0x150/0x2b0
    [<00000000c822c9fe>] do_syscall_64+0x33/0x40
    [<00000000e5666ce1>] entry_SYSCALL_64_after_hwframe+0x67/0xd1

BUG: leak checking failed

VM DIAGNOSIS:
02:01:31  Registers:
info registers vcpu 0
RAX=ffffffff83e7e960 RBX=0000000000000000 RCX=ffffffff83e6653c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e7ef68 RBP=0000000000000000 RSP=ffffffff84e07e38
R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001
R12=0000000000000000 R13=ffffffff85677688 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e7e96e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9dc2950020 CR3=000000000f0d0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e
XMM02=2934343120657a697328203030306261 XMM03=3120646970202c22342e726f74756365
XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020
XMM06=65747962203233207473726966282070 XMM07=36322065676128203832333334383739
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83e7e960 RBX=0000000000000001 RCX=ffffffff83e6653c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e7ef68 RBP=0000000000000001 RSP=ffff888008987e70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff85677688 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e7e96e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdc53ecf28 CR3=000000000f0e8000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0a64656c69616620676e696b63656863
XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000
XMM04=22726f7475636578652d7a79732f225b XMM05=7463656a626f6b2220226b61656c2220
XMM06=2273677261765f656d616e5f7465735f XMM07=31207375746174732074697865203a5d
XMM08=7563657865111c6c61746f7420636578 XMM09=78650800737472617473657220726f74
XMM10=6e616320636578650e006e6567206365 XMM11=6e696820636578650a00657461646964
XMM12=0000736465657320636578650a0f7374 XMM13=727074656e5f70756f7267632474616e
XMM14=2c30722870616d6f69727066695f6f69 XMM15=0a29307830202c327830202c30783020