il, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2622.170302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:40:39 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2622.199017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2622.207632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2622.213300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:40:39 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:39 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:39 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 21)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2622.327693] FAULT_INJECTION: forcing a failure.
[ 2622.327693] name failslab, interval 1, probability 0, space 0, times 0
[ 2622.329014] CPU: 1 PID: 13817 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2622.329803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2622.330697] Call Trace:
[ 2622.331000]  dump_stack+0x107/0x167
[ 2622.331415]  should_fail.cold+0x5/0xa
[ 2622.331852]  ? __d_alloc+0x2a/0x990
[ 2622.332282]  should_failslab+0x5/0x20
[ 2622.332714]  kmem_cache_alloc+0x5b/0x310
[ 2622.333179]  __d_alloc+0x2a/0x990
[ 2622.333572]  ? find_held_lock+0x2c/0x110
[ 2622.334016]  d_alloc_pseudo+0x19/0x70
[ 2622.334448]  alloc_file_pseudo+0xce/0x250
[ 2622.334921]  ? trace_hardirqs_on+0x5b/0x180
[ 2622.335409]  ? alloc_file+0x5a0/0x5a0
[ 2622.335852]  anon_inode_getfile+0xc8/0x1f0
[ 2622.336356]  io_uring_setup+0x138b/0x2980
[ 2622.336831]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2622.337408]  ? wait_for_completion_io+0x270/0x270
[ 2622.337972]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2622.338564]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2622.339143]  do_syscall_64+0x33/0x40
[ 2622.339551]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2622.340155] RIP: 0033:0x7f5a8776db19
[ 2622.340566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2622.342654] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2622.343519] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2622.344311] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2622.345082] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2622.345849] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2622.346616] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:40:39 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:39 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab342914876000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2622.411693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2622.452805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:40:39 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:39 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 22)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2622.515625] FAULT_INJECTION: forcing a failure.
[ 2622.515625] name failslab, interval 1, probability 0, space 0, times 0
[ 2622.516983] CPU: 1 PID: 13834 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2622.517735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2622.518668] Call Trace:
[ 2622.518973]  dump_stack+0x107/0x167
[ 2622.519394]  should_fail.cold+0x5/0xa
[ 2622.519826]  ? create_object.isra.0+0x3a/0xa20
[ 2622.520370]  should_failslab+0x5/0x20
[ 2622.520799]  kmem_cache_alloc+0x5b/0x310
[ 2622.521258]  create_object.isra.0+0x3a/0xa20
[ 2622.521753]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2622.522304]  kmem_cache_alloc+0x159/0x310
[ 2622.522774]  __d_alloc+0x2a/0x990
[ 2622.523168]  ? find_held_lock+0x2c/0x110
[ 2622.523626]  d_alloc_pseudo+0x19/0x70
[ 2622.524052]  alloc_file_pseudo+0xce/0x250
[ 2622.524523]  ? alloc_file+0x5a0/0x5a0
[ 2622.524965]  anon_inode_getfile+0xc8/0x1f0
[ 2622.525447]  io_uring_setup+0x138b/0x2980
[ 2622.525922]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2622.526496]  ? wait_for_completion_io+0x270/0x270
[ 2622.527050]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2622.527649]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2622.528249]  do_syscall_64+0x33/0x40
[ 2622.528652]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2622.529234] RIP: 0033:0x7f5a8776db19
[ 2622.529644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2622.531725] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2622.532602] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2622.533374] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2622.534134] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2622.534895] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2622.535664] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2622.592818] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:40:54 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:40:54 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:40:54 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:54 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2637.628008] FAULT_INJECTION: forcing a failure.
[ 2637.628008] name failslab, interval 1, probability 0, space 0, times 0
[ 2637.629760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2637.630415] CPU: 0 PID: 13856 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2637.633000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2637.634831] Call Trace:
[ 2637.635384]  dump_stack+0x107/0x167
[ 2637.636143]  should_fail.cold+0x5/0xa
[ 2637.636946]  ? __alloc_file+0x21/0x320
[ 2637.637759]  should_failslab+0x5/0x20
[ 2637.638552]  kmem_cache_alloc+0x5b/0x310
[ 2637.639401]  __alloc_file+0x21/0x320
[ 2637.640180]  alloc_empty_file+0x6d/0x170
[ 2637.641046]  alloc_file+0x5e/0x5a0
[ 2637.641789]  alloc_file_pseudo+0x16a/0x250
[ 2637.642668]  ? alloc_file+0x5a0/0x5a0
[ 2637.643485]  anon_inode_getfile+0xc8/0x1f0
[ 2637.644371]  io_uring_setup+0x138b/0x2980
[ 2637.645258]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2637.646327]  ? wait_for_completion_io+0x270/0x270
[ 2637.647351]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2637.648455]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2637.649536]  do_syscall_64+0x33/0x40
[ 2637.650320]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2637.651402] RIP: 0033:0x7f5a8776db19
[ 2637.652177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2637.655968] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2637.657549] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2637.659021] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2637.660520] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2637.662003] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2637.663466] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:40:54 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:40:54 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 23)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:40:54 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:40:54 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2637.687133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2637.688891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2637.749955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:40:54 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:55 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:40:55 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 24)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:40:55 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:55 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2637.867888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2637.879294] FAULT_INJECTION: forcing a failure.
[ 2637.879294] name failslab, interval 1, probability 0, space 0, times 0
[ 2637.880573] CPU: 1 PID: 13973 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2637.881344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2637.882321] Call Trace:
[ 2637.882626]  dump_stack+0x107/0x167
[ 2637.883061]  should_fail.cold+0x5/0xa
[ 2637.883525]  ? create_object.isra.0+0x3a/0xa20
[ 2637.884083]  should_failslab+0x5/0x20
[ 2637.884515]  kmem_cache_alloc+0x5b/0x310
[ 2637.884970]  create_object.isra.0+0x3a/0xa20
[ 2637.885460]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2637.886020]  kmem_cache_alloc+0x159/0x310
[ 2637.886483]  __alloc_file+0x21/0x320
[ 2637.886898]  alloc_empty_file+0x6d/0x170
[ 2637.887380]  alloc_file+0x5e/0x5a0
[ 2637.887775]  alloc_file_pseudo+0x16a/0x250
[ 2637.888241]  ? alloc_file+0x5a0/0x5a0
[ 2637.888680]  anon_inode_getfile+0xc8/0x1f0
[ 2637.889152]  io_uring_setup+0x138b/0x2980
[ 2637.889651]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2637.890217]  ? wait_for_completion_io+0x270/0x270
[ 2637.890812]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2637.891396]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2637.891997]  do_syscall_64+0x33/0x40
[ 2637.892414]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2637.892987] RIP: 0033:0x7f5a8776db19
[ 2637.893404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2637.895440] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2637.896364] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2637.897156] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2637.897946] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2637.898792] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2637.899577] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2637.933659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:40:55 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2637.952052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:40:55 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:40:55 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:40:55 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 25)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:40:55 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2638.054823] FAULT_INJECTION: forcing a failure.
[ 2638.054823] name failslab, interval 1, probability 0, space 0, times 0
[ 2638.056151] CPU: 1 PID: 13990 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2638.056949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2638.057906] Call Trace:
[ 2638.058215]  dump_stack+0x107/0x167
[ 2638.058638]  should_fail.cold+0x5/0xa
[ 2638.059077]  ? security_file_alloc+0x34/0x170
[ 2638.059596]  should_failslab+0x5/0x20
[ 2638.060014]  kmem_cache_alloc+0x5b/0x310
[ 2638.060489]  security_file_alloc+0x34/0x170
[ 2638.060989]  __alloc_file+0xb7/0x320
[ 2638.061417]  alloc_empty_file+0x6d/0x170
[ 2638.061859]  alloc_file+0x5e/0x5a0
[ 2638.062271]  alloc_file_pseudo+0x16a/0x250
[ 2638.062754]  ? alloc_file+0x5a0/0x5a0
[ 2638.063178]  anon_inode_getfile+0xc8/0x1f0
[ 2638.063666]  io_uring_setup+0x138b/0x2980
[ 2638.064118]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2638.064711]  ? wait_for_completion_io+0x270/0x270
[ 2638.065278]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2638.065877]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2638.066439]  do_syscall_64+0x33/0x40
[ 2638.066870]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2638.067455] RIP: 0033:0x7f5a8776db19
[ 2638.067859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2638.069974] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2638.070851] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2638.071665] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2638.072428] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2638.073272] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2638.074088] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:40:55 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2638.133578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2638.146645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:41:09 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:09 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:09 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 26)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:09 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:09 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:09 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:09 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab342914876000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:09 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2652.216533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.224175] FAULT_INJECTION: forcing a failure.
[ 2652.224175] name failslab, interval 1, probability 0, space 0, times 0
[ 2652.225558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2652.226554] CPU: 0 PID: 14013 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2652.229162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2652.230902] Call Trace:
[ 2652.231456]  dump_stack+0x107/0x167
[ 2652.232220]  should_fail.cold+0x5/0xa
[ 2652.233038]  ? create_object.isra.0+0x3a/0xa20
[ 2652.233998]  should_failslab+0x5/0x20
[ 2652.234800]  kmem_cache_alloc+0x5b/0x310
[ 2652.235662]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[ 2652.236825]  create_object.isra.0+0x3a/0xa20
[ 2652.237765]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2652.238836]  kmem_cache_alloc+0x159/0x310
[ 2652.239713]  security_file_alloc+0x34/0x170
[ 2652.240622]  __alloc_file+0xb7/0x320
[ 2652.241420]  alloc_empty_file+0x6d/0x170
[ 2652.242272]  alloc_file+0x5e/0x5a0
[ 2652.243022]  alloc_file_pseudo+0x16a/0x250
[ 2652.243914]  ? alloc_file+0x5a0/0x5a0
[ 2652.244728]  anon_inode_getfile+0xc8/0x1f0
[ 2652.245631]  io_uring_setup+0x138b/0x2980
[ 2652.246514]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2652.247582]  ? wait_for_completion_io+0x270/0x270
[ 2652.248618]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2652.249725]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2652.250794]  do_syscall_64+0x33/0x40
[ 2652.251582]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2652.252661] RIP: 0033:0x7f5a8776db19
[ 2652.253446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2652.257327] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2652.258926] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2652.260427] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2652.261925] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2652.263441] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2652.264947] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2652.278800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2652.281665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:41:09 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:09 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:09 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2652.446923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:41:09 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:09 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2652.557343] perf: interrupt took too long (15605 > 15596), lowering kernel.perf_event_max_sample_rate to 12000
03:41:09 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:09 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab342914876000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2652.667520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2652.681916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:41:24 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 27)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:24 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:24 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab342914876000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:24 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2666.879645] FAULT_INJECTION: forcing a failure.
[ 2666.879645] name failslab, interval 1, probability 0, space 0, times 0
[ 2666.881252] CPU: 1 PID: 14069 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2666.882181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2666.883273] Call Trace:
[ 2666.883634]  dump_stack+0x107/0x167
[ 2666.884104]  should_fail.cold+0x5/0xa
[ 2666.884609]  ? io_uring_alloc_task_context+0x99/0x6a0
[ 2666.885287]  should_failslab+0x5/0x20
[ 2666.885805]  kmem_cache_alloc_trace+0x55/0x320
[ 2666.886421]  io_uring_alloc_task_context+0x99/0x6a0
[ 2666.887075]  ? io_import_iovec+0x1120/0x1120
[ 2666.887664]  ? lock_downgrade+0x6d0/0x6d0
[ 2666.888211]  ? do_raw_spin_lock+0x121/0x260
[ 2666.888784]  ? rwlock_bug.part.0+0x90/0x90
[ 2666.889351]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2666.889990]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2666.890691]  ? alloc_fd+0x2e7/0x670
[ 2666.891171]  io_uring_setup+0x1fbb/0x2980
[ 2666.891720]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2666.892397]  ? wait_for_completion_io+0x270/0x270
[ 2666.893045]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2666.893740]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2666.894414]  do_syscall_64+0x33/0x40
[ 2666.894904]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2666.895572] RIP: 0033:0x7f5a8776db19
[ 2666.896039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2666.898475] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2666.899504] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2666.900390] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2666.901360] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2666.902289] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2666.903229] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2666.922258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2666.927253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2666.929852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:41:24 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:24 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:24 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:24 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2666.977182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2666.990248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:41:24 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 28)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:24 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:24 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2667.123488] FAULT_INJECTION: forcing a failure.
[ 2667.123488] name failslab, interval 1, probability 0, space 0, times 0
[ 2667.125950] CPU: 0 PID: 14164 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2667.127413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2667.129157] Call Trace:
[ 2667.129723]  dump_stack+0x107/0x167
[ 2667.130501]  should_fail.cold+0x5/0xa
[ 2667.131300]  ? create_object.isra.0+0x3a/0xa20
[ 2667.132260]  should_failslab+0x5/0x20
[ 2667.133060]  kmem_cache_alloc+0x5b/0x310
[ 2667.133923]  create_object.isra.0+0x3a/0xa20
[ 2667.134846]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2667.135927]  kmem_cache_alloc_trace+0x151/0x320
[ 2667.136921]  io_uring_alloc_task_context+0x99/0x6a0
[ 2667.137974]  ? io_import_iovec+0x1120/0x1120
[ 2667.138900]  ? lock_downgrade+0x6d0/0x6d0
[ 2667.139768]  ? do_raw_spin_lock+0x121/0x260
[ 2667.140670]  ? rwlock_bug.part.0+0x90/0x90
[ 2667.141577]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2667.142592]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2667.143685]  ? alloc_fd+0x2e7/0x670
[ 2667.144461]  io_uring_setup+0x1fbb/0x2980
[ 2667.145347]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2667.146440]  ? wait_for_completion_io+0x270/0x270
[ 2667.147473]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.148565]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.149664]  do_syscall_64+0x33/0x40
[ 2667.150440]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2667.151513] RIP: 0033:0x7f5a8776db19
[ 2667.152291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2667.156151] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2667.157756] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2667.159245] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
03:41:24 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2667.160733] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2667.162442] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2667.163939] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:41:24 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2667.195292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2667.218801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:41:24 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2667.302034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:41:24 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 29)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2667.346818] FAULT_INJECTION: forcing a failure.
[ 2667.346818] name failslab, interval 1, probability 0, space 0, times 0
[ 2667.348137] CPU: 1 PID: 14211 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2667.348895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2667.349872] Call Trace:
[ 2667.350185]  dump_stack+0x107/0x167
[ 2667.350599]  should_fail.cold+0x5/0xa
[ 2667.351025]  ? create_object.isra.0+0x3a/0xa20
[ 2667.351537]  should_failslab+0x5/0x20
[ 2667.351959]  kmem_cache_alloc+0x5b/0x310
[ 2667.352434]  create_object.isra.0+0x3a/0xa20
[ 2667.352930]  kmemleak_alloc_percpu+0xa0/0x100
[ 2667.353437]  pcpu_alloc+0x4e2/0x1240
[ 2667.353861]  __percpu_counter_init+0x10d/0x2d0
[ 2667.354368]  io_uring_alloc_task_context+0xcc/0x6a0
[ 2667.354942]  ? io_import_iovec+0x1120/0x1120
[ 2667.355436]  ? lock_downgrade+0x6d0/0x6d0
[ 2667.355891]  ? do_raw_spin_lock+0x121/0x260
[ 2667.356398]  ? rwlock_bug.part.0+0x90/0x90
[ 2667.356870]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2667.357485]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2667.358102]  ? alloc_fd+0x2e7/0x670
[ 2667.358510]  io_uring_setup+0x1fbb/0x2980
[ 2667.358971]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2667.359530]  ? wait_for_completion_io+0x270/0x270
[ 2667.360072]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.360657]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.361227]  do_syscall_64+0x33/0x40
[ 2667.361647]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2667.362215] RIP: 0033:0x7f5a8776db19
[ 2667.362624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2667.364784] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2667.365638] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2667.366462] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2667.367252] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2667.368035] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2667.368862] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2667.416963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2684.519641] FAULT_INJECTION: forcing a failure.
[ 2684.519641] name failslab, interval 1, probability 0, space 0, times 0
[ 2684.521197] CPU: 1 PID: 14221 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2684.522071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2684.523127] Call Trace:
[ 2684.523470]  dump_stack+0x107/0x167
[ 2684.523933]  should_fail.cold+0x5/0xa
[ 2684.524420]  ? create_object.isra.0+0x3a/0xa20
[ 2684.524992]  should_failslab+0x5/0x20
[ 2684.525470]  kmem_cache_alloc+0x5b/0x310
[ 2684.525995]  create_object.isra.0+0x3a/0xa20
[ 2684.526548]  kmemleak_alloc_percpu+0xa0/0x100
[ 2684.527105]  pcpu_alloc+0x4e2/0x1240
[ 2684.527591]  __percpu_counter_init+0x10d/0x2d0
[ 2684.528171]  io_uring_alloc_task_context+0xcc/0x6a0
[ 2684.529056]  ? io_import_iovec+0x1120/0x1120
[ 2684.529793]  ? lock_downgrade+0x6d0/0x6d0
03:41:41 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:41 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:41 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 30)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:41 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2684.530469]  ? do_raw_spin_lock+0x121/0x260
[ 2684.531044]  ? rwlock_bug.part.0+0x90/0x90
[ 2684.531587]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2684.532195]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2684.532867]  ? alloc_fd+0x2e7/0x670
[ 2684.533339]  io_uring_setup+0x1fbb/0x2980
[ 2684.533867]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2684.534515]  ? wait_for_completion_io+0x270/0x270
[ 2684.535139]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2684.535795]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2684.536436]  do_syscall_64+0x33/0x40
[ 2684.536895]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2684.537540] RIP: 0033:0x7f5a8776db19
[ 2684.538012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2684.540303] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2684.541254] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2684.542196] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2684.543080] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2684.543973] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2684.544857] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:41:41 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:41 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:41 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:41 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2684.557222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2684.569015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2684.569793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2684.572437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2684.579451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:41:41 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:41 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:41 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2684.739612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:41:41 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 31)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:42 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:42 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2684.868050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:41:42 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2684.887553] FAULT_INJECTION: forcing a failure.
[ 2684.887553] name failslab, interval 1, probability 0, space 0, times 0
[ 2684.890268] CPU: 0 PID: 14297 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2684.891729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2684.893480] Call Trace:
[ 2684.894055]  dump_stack+0x107/0x167
[ 2684.894824]  should_fail.cold+0x5/0xa
[ 2684.895629]  ? io_uring_alloc_task_context+0x4a3/0x6a0
[ 2684.896735]  should_failslab+0x5/0x20
[ 2684.897545]  kmem_cache_alloc_trace+0x55/0x320
[ 2684.898530]  io_uring_alloc_task_context+0x4a3/0x6a0
[ 2684.899554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2684.899605]  ? io_import_iovec+0x1120/0x1120
[ 2684.901444]  ? lock_downgrade+0x6d0/0x6d0
[ 2684.902350]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2684.903370]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2684.904481]  ? alloc_fd+0x2e7/0x670
[ 2684.905266]  io_uring_setup+0x1fbb/0x2980
[ 2684.906165]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2684.907239]  ? wait_for_completion_io+0x270/0x270
[ 2684.908288]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2684.909392]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2684.910495]  do_syscall_64+0x33/0x40
[ 2684.911287]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2684.912372] RIP: 0033:0x7f5a8776db19
[ 2684.913161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2684.917070] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2684.918684] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2684.920186] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2684.921709] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2684.923222] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2684.924742] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:41:42 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2684.959939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2685.038976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2699.822098] FAULT_INJECTION: forcing a failure.
[ 2699.822098] name failslab, interval 1, probability 0, space 0, times 0
[ 2699.823700] CPU: 0 PID: 14377 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2699.824639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2699.825731] Call Trace:
[ 2699.826086]  dump_stack+0x107/0x167
[ 2699.826573]  should_fail.cold+0x5/0xa
[ 2699.827084]  ? create_object.isra.0+0x3a/0xa20
[ 2699.827693]  should_failslab+0x5/0x20
[ 2699.828206]  kmem_cache_alloc+0x5b/0x310
[ 2699.828756]  create_object.isra.0+0x3a/0xa20
[ 2699.829336]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2699.830014]  kmem_cache_alloc_trace+0x151/0x320
[ 2699.830642]  io_uring_alloc_task_context+0x4a3/0x6a0
[ 2699.831343]  ? io_import_iovec+0x1120/0x1120
[ 2699.831929]  ? lock_downgrade+0x6d0/0x6d0
[ 2699.832482]  ? do_raw_spin_lock+0x121/0x260
[ 2699.833057]  ? rwlock_bug.part.0+0x90/0x90
[ 2699.833629]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2699.834274]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2699.834978]  ? alloc_fd+0x2e7/0x670
[ 2699.835467]  io_uring_setup+0x1fbb/0x2980
[ 2699.836022]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2699.836702]  ? wait_for_completion_io+0x270/0x270
[ 2699.837359]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2699.838055]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2699.838756]  do_syscall_64+0x33/0x40
[ 2699.839251]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2699.839946] RIP: 0033:0x7f5a8776db19
[ 2699.840442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2699.842886] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2699.843910] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2699.844855] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2699.845814] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2699.846763] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2699.847715] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:41:56 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 32)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:56 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab34291487600000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2699.867899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2699.869271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2699.877391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2699.897814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:41:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2699.943132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:41:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 33)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2700.059385] FAULT_INJECTION: forcing a failure.
[ 2700.059385] name failslab, interval 1, probability 0, space 0, times 0
[ 2700.060844] CPU: 0 PID: 14403 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2700.061687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2700.062705] Call Trace:
[ 2700.063033]  dump_stack+0x107/0x167
[ 2700.063482]  should_fail.cold+0x5/0xa
[ 2700.063945]  ? io_wq_create+0xeb/0xc00
[ 2700.064421]  should_failslab+0x5/0x20
[ 2700.064887]  __kmalloc+0x72/0x390
[ 2700.065314]  io_wq_create+0xeb/0xc00
[ 2700.065771]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2700.066391]  ? io_import_iovec+0x1120/0x1120
[ 2700.066942]  ? io_apoll_task_func+0x2d0/0x2d0
03:41:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2700.067485]  ? __io_req_find_next+0x300/0x300
[ 2700.068189]  ? do_raw_spin_lock+0x121/0x260
[ 2700.068717]  ? rwlock_bug.part.0+0x90/0x90
[ 2700.069243]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2700.069825]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2700.070459]  ? alloc_fd+0x2e7/0x670
[ 2700.070904]  io_uring_setup+0x1fbb/0x2980
[ 2700.071417]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2700.072026]  ? wait_for_completion_io+0x270/0x270
[ 2700.072619]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2700.073241]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2700.073861]  do_syscall_64+0x33/0x40
[ 2700.074310]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2700.074931] RIP: 0033:0x7f5a8776db19
[ 2700.075386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2700.077590] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2700.078520] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2700.079381] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2700.080232] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2700.081091] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2700.081942] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:41:57 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2700.210715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:41:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2700.235623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2700.262681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2700.269869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:41:57 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:41:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 34)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:41:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:41:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2700.464149] FAULT_INJECTION: forcing a failure.
[ 2700.464149] name failslab, interval 1, probability 0, space 0, times 0
[ 2700.466483] CPU: 1 PID: 14440 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2700.467871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2700.469782] Call Trace:
[ 2700.470321]  dump_stack+0x107/0x167
[ 2700.471056]  should_fail.cold+0x5/0xa
[ 2700.471822]  ? create_object.isra.0+0x3a/0xa20
[ 2700.472730]  should_failslab+0x5/0x20
[ 2700.473491]  kmem_cache_alloc+0x5b/0x310
[ 2700.474312]  create_object.isra.0+0x3a/0xa20
[ 2700.475209]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2700.476221]  __kmalloc+0x16e/0x390
[ 2700.476928]  io_wq_create+0xeb/0xc00
[ 2700.477684]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2700.478704]  ? io_import_iovec+0x1120/0x1120
[ 2700.479571]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2700.480465]  ? __io_req_find_next+0x300/0x300
[ 2700.481363]  ? do_raw_spin_lock+0x121/0x260
[ 2700.482225]  ? rwlock_bug.part.0+0x90/0x90
[ 2700.483073]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2700.484031]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2700.485074]  ? alloc_fd+0x2e7/0x670
[ 2700.485825]  io_uring_setup+0x1fbb/0x2980
[ 2700.486667]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2700.487671]  ? wait_for_completion_io+0x270/0x270
[ 2700.488645]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2700.489690]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2700.490736]  do_syscall_64+0x33/0x40
[ 2700.491486]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2700.492508] RIP: 0033:0x7f5a8776db19
[ 2700.493261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2700.496936] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2700.498468] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2700.499881] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2700.501311] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2700.502735] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2700.504145] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2700.591295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:11 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:11 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:11 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 35)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:42:11 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:11 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:11 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:11 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:11 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2714.555000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2714.567152] FAULT_INJECTION: forcing a failure.
[ 2714.567152] name failslab, interval 1, probability 0, space 0, times 0
[ 2714.569524] CPU: 0 PID: 14453 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2714.570967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2714.572701] Call Trace:
[ 2714.573261]  dump_stack+0x107/0x167
[ 2714.574029]  should_fail.cold+0x5/0xa
[ 2714.574841]  ? io_wq_create+0x6ef/0xc00
[ 2714.575689]  should_failslab+0x5/0x20
[ 2714.576496]  kmem_cache_alloc_node_trace+0x59/0x340
[ 2714.577539]  io_wq_create+0x6ef/0xc00
[ 2714.578344]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2714.579409]  ? io_import_iovec+0x1120/0x1120
[ 2714.580340]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2714.581273]  ? __io_req_find_next+0x300/0x300
[ 2714.582208]  ? do_raw_spin_lock+0x121/0x260
[ 2714.583113]  ? rwlock_bug.part.0+0x90/0x90
[ 2714.584002]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2714.585005]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2714.586101]  ? alloc_fd+0x2e7/0x670
[ 2714.586879]  io_uring_setup+0x1fbb/0x2980
[ 2714.587755]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2714.588808]  ? wait_for_completion_io+0x270/0x270
[ 2714.589839]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2714.590970]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2714.592041]  do_syscall_64+0x33/0x40
[ 2714.592813]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2714.593879] RIP: 0033:0x7f5a8776db19
[ 2714.594647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2714.598364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2714.598471] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2714.601119] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2714.602609] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2714.604103] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2714.605594] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2714.607138] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:42:11 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2714.638573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2714.644336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:42:11 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:11 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:11 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2714.753240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2714.781490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2729.805287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2729.825567] FAULT_INJECTION: forcing a failure.
[ 2729.825567] name failslab, interval 1, probability 0, space 0, times 0
[ 2729.827103] CPU: 1 PID: 14498 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2729.827969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2729.829058] Call Trace:
[ 2729.829403]  dump_stack+0x107/0x167
[ 2729.830204]  should_fail.cold+0x5/0xa
[ 2729.830840]  ? create_object.isra.0+0x3a/0xa20
[ 2729.831463]  should_failslab+0x5/0x20
[ 2729.831959]  kmem_cache_alloc+0x5b/0x310
[ 2729.832480]  ? io_wq_create+0x114/0xc00
[ 2729.832990]  create_object.isra.0+0x3a/0xa20
[ 2729.833558]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2729.834218]  kmem_cache_alloc_node_trace+0x16d/0x340
[ 2729.834882]  io_wq_create+0x6ef/0xc00
[ 2729.835409]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2729.836056]  ? io_import_iovec+0x1120/0x1120
[ 2729.836633]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2729.837191]  ? __io_req_find_next+0x300/0x300
[ 2729.837784]  ? do_raw_spin_lock+0x121/0x260
[ 2729.838348]  ? rwlock_bug.part.0+0x90/0x90
[ 2729.838905]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2729.839565]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2729.840360]  ? alloc_fd+0x2e7/0x670
03:42:26 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:26 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:26 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:26 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:26 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 36)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:42:26 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:26 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
[ 2729.840965]  io_uring_setup+0x1fbb/0x2980
[ 2729.841688]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2729.842359]  ? wait_for_completion_io+0x270/0x270
[ 2729.843004]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2729.843356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2729.843667]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2729.843686]  do_syscall_64+0x33/0x40
[ 2729.846620]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2729.847287] RIP: 0033:0x7f5a8776db19
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:27 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2729.847781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2729.850478] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2729.851426] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2729.852293] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2729.852970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2729.853179] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2729.853186] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2729.853193] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2729.884772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:42:27 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:27 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2729.980235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:27 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:27 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:27 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 37)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2730.098656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2730.116910] FAULT_INJECTION: forcing a failure.
[ 2730.116910] name failslab, interval 1, probability 0, space 0, times 0
[ 2730.118271] CPU: 1 PID: 14526 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2730.119067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2730.120041] Call Trace:
[ 2730.120347]  dump_stack+0x107/0x167
[ 2730.120779]  should_fail.cold+0x5/0xa
[ 2730.121225]  ? create_object.isra.0+0x3a/0xa20
[ 2730.121756]  should_failslab+0x5/0x20
[ 2730.122204]  kmem_cache_alloc+0x5b/0x310
[ 2730.122673]  ? io_wq_create+0x114/0xc00
[ 2730.123132]  create_object.isra.0+0x3a/0xa20
[ 2730.123652]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2730.124244]  kmem_cache_alloc_node_trace+0x16d/0x340
[ 2730.124839]  io_wq_create+0x6ef/0xc00
[ 2730.125284]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2730.125866]  ? io_import_iovec+0x1120/0x1120
[ 2730.126376]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2730.126893]  ? __io_req_find_next+0x300/0x300
[ 2730.127409]  ? do_raw_spin_lock+0x121/0x260
[ 2730.127893]  ? rwlock_bug.part.0+0x90/0x90
[ 2730.128371]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2730.128918]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2730.129515]  ? alloc_fd+0x2e7/0x670
[ 2730.129927]  io_uring_setup+0x1fbb/0x2980
[ 2730.130405]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2730.131000]  ? wait_for_completion_io+0x270/0x270
[ 2730.131587]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2730.132191]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2730.132794]  do_syscall_64+0x33/0x40
[ 2730.133224]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2730.133818] RIP: 0033:0x7f5a8776db19
[ 2730.134247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2730.136399] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2730.137289] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2730.138099] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2730.138935] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2730.139780] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2730.140595] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:42:27 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:27 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2730.254470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:27 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:27 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2730.358018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:42:27 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:27 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 38)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2730.461315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2730.505870] FAULT_INJECTION: forcing a failure.
[ 2730.505870] name failslab, interval 1, probability 0, space 0, times 0
[ 2730.508353] CPU: 1 PID: 14548 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2730.509808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2730.511564] Call Trace:
[ 2730.512126]  dump_stack+0x107/0x167
[ 2730.512897]  should_fail.cold+0x5/0xa
[ 2730.513706]  ? create_object.isra.0+0x3a/0xa20
[ 2730.514667]  should_failslab+0x5/0x20
[ 2730.515478]  kmem_cache_alloc+0x5b/0x310
[ 2730.516337]  create_object.isra.0+0x3a/0xa20
[ 2730.517275]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2730.518349]  kmem_cache_alloc_trace+0x151/0x320
[ 2730.519341]  __io_uring_add_tctx_node+0x15c/0x520
[ 2730.520381]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2730.521481]  ? alloc_fd+0x2e7/0x670
[ 2730.522265]  io_uring_setup+0x1fbb/0x2980
[ 2730.523150]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2730.524225]  ? wait_for_completion_io+0x270/0x270
[ 2730.525272]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2730.526386]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2730.527487]  do_syscall_64+0x33/0x40
[ 2730.528274]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2730.529364] RIP: 0033:0x7f5a8776db19
[ 2730.530166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2730.534041] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2730.535657] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2730.537150] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2730.538654] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2730.540164] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2730.541651] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2730.579474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:43 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:43 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:43 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:43 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:43 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x2}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:43 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:43 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 39)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:42:43 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2745.930943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2745.933383] FAULT_INJECTION: forcing a failure.
[ 2745.933383] name failslab, interval 1, probability 0, space 0, times 0
[ 2745.933449] CPU: 1 PID: 14568 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2745.933468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2745.938774] Call Trace:
[ 2745.939193]  dump_stack+0x107/0x167
[ 2745.939760]  should_fail.cold+0x5/0xa
[ 2745.940368]  ? xas_alloc+0x336/0x440
[ 2745.940947]  should_failslab+0x5/0x20
[ 2745.941544]  kmem_cache_alloc+0x5b/0x310
[ 2745.942173]  ? stack_trace_consume_entry+0x160/0x160
[ 2745.942970]  xas_alloc+0x336/0x440
[ 2745.943532]  xas_create+0x34a/0x10d0
[ 2745.944129]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2745.944965]  xas_store+0x8c/0x1c40
[ 2745.945536]  __xa_store+0x164/0x2d0
[ 2745.946120]  ? xa_delete_node+0x280/0x280
[ 2745.946788]  ? trace_hardirqs_on+0x5b/0x180
[ 2745.947429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2745.947486]  xa_store+0x31/0x50
[ 2745.950235]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2745.951008]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2745.951835]  ? alloc_fd+0x2e7/0x670
[ 2745.952437]  io_uring_setup+0x1fbb/0x2980
[ 2745.953099]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2745.953890]  ? wait_for_completion_io+0x270/0x270
[ 2745.954656]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2745.955476]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2745.956297]  do_syscall_64+0x33/0x40
[ 2745.956873]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2745.957693] RIP: 0033:0x7f5a8776db19
[ 2745.958275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2745.961138] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2745.962311] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2745.963396] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2745.964134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2745.964499] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2745.964519] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2745.968623] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2745.974736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:42:43 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x3}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2746.098536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:43 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:43 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 40)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2746.277655] FAULT_INJECTION: forcing a failure.
[ 2746.277655] name failslab, interval 1, probability 0, space 0, times 0
[ 2746.279222] CPU: 1 PID: 14593 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2746.280140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2746.281241] Call Trace:
[ 2746.281598]  dump_stack+0x107/0x167
[ 2746.282076]  should_fail.cold+0x5/0xa
[ 2746.282588]  ? create_object.isra.0+0x3a/0xa20
[ 2746.283187]  should_failslab+0x5/0x20
[ 2746.283698]  kmem_cache_alloc+0x5b/0x310
[ 2746.284260]  create_object.isra.0+0x3a/0xa20
[ 2746.284838]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2746.285514]  kmem_cache_alloc+0x159/0x310
[ 2746.286065]  xas_alloc+0x336/0x440
[ 2746.286535]  xas_create+0x34a/0x10d0
[ 2746.287027]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2746.287716]  xas_store+0x8c/0x1c40
[ 2746.288193]  __xa_store+0x164/0x2d0
[ 2746.288665]  ? xa_delete_node+0x280/0x280
[ 2746.289209]  ? trace_hardirqs_on+0x5b/0x180
[ 2746.289777]  xa_store+0x31/0x50
[ 2746.290215]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2746.290853]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2746.291543]  ? alloc_fd+0x2e7/0x670
[ 2746.292040]  io_uring_setup+0x1fbb/0x2980
[ 2746.292598]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2746.293267]  ? wait_for_completion_io+0x270/0x270
[ 2746.293921]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2746.294608]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2746.295297]  do_syscall_64+0x33/0x40
[ 2746.295790]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2746.296466] RIP: 0033:0x7f5a8776db19
[ 2746.296953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2746.299354] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2746.300351] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2746.301288] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2746.302208] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2746.303145] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2746.304068] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:42:43 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:43 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x4}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2746.377987] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:57 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:57 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2759.861450] FAULT_INJECTION: forcing a failure.
03:42:57 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:42:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:57 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2759.861450] name failslab, interval 1, probability 0, space 0, times 0
[ 2759.863469] CPU: 1 PID: 14610 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2759.864594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2759.866110] Call Trace:
[ 2759.866553]  dump_stack+0x107/0x167
[ 2759.867145]  should_fail.cold+0x5/0xa
[ 2759.867763]  ? xas_alloc+0x336/0x440
[ 2759.868379]  should_failslab+0x5/0x20
[ 2759.868993]  kmem_cache_alloc+0x5b/0x310
03:42:57 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 41)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:42:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x8}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:57 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2759.869666]  xas_alloc+0x336/0x440
[ 2759.870360]  xas_create+0x34a/0x10d0
[ 2759.870967]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2759.871815]  xas_store+0x8c/0x1c40
[ 2759.872419]  __xa_store+0x164/0x2d0
[ 2759.873009]  ? xa_delete_node+0x280/0x280
[ 2759.873674]  ? trace_hardirqs_on+0x5b/0x180
[ 2759.874377]  xa_store+0x31/0x50
[ 2759.874914]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2759.875691]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2759.876562]  ? alloc_fd+0x2e7/0x670
[ 2759.877152]  io_uring_setup+0x1fbb/0x2980
[ 2759.877839]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2759.878667]  ? wait_for_completion_io+0x270/0x270
[ 2759.879457]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2759.880312]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2759.881143]  do_syscall_64+0x33/0x40
[ 2759.881746]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2759.882577] RIP: 0033:0x7f5a8776db19
[ 2759.882847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2759.883161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2759.883170] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2759.883195] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2759.886705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2759.887999] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2759.888008] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2759.888015] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2759.888022] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2759.891704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2759.902350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:42:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x11}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:57 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2759.967648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:42:57 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2760.049145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:42:57 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x88}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:42:57 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 42)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2760.181855] FAULT_INJECTION: forcing a failure.
[ 2760.181855] name failslab, interval 1, probability 0, space 0, times 0
[ 2760.183434] CPU: 1 PID: 14646 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2760.184405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2760.185561] Call Trace:
[ 2760.185878]  dump_stack+0x107/0x167
[ 2760.186387]  should_fail.cold+0x5/0xa
[ 2760.186918]  ? create_object.isra.0+0x3a/0xa20
[ 2760.187555]  should_failslab+0x5/0x20
[ 2760.188087]  kmem_cache_alloc+0x5b/0x310
[ 2760.188664]  ? mark_held_locks+0x9e/0xe0
[ 2760.189233]  create_object.isra.0+0x3a/0xa20
[ 2760.189845]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2760.190552]  kmem_cache_alloc+0x159/0x310
[ 2760.191139]  xas_alloc+0x336/0x440
[ 2760.191632]  xas_create+0x34a/0x10d0
[ 2760.192155]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2760.192909]  xas_store+0x8c/0x1c40
[ 2760.193412]  __xa_store+0x164/0x2d0
[ 2760.193917]  ? xa_delete_node+0x280/0x280
[ 2760.194494]  ? trace_hardirqs_on+0x5b/0x180
[ 2760.195095]  xa_store+0x31/0x50
[ 2760.195560]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2760.196226]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2760.196961]  ? alloc_fd+0x2e7/0x670
[ 2760.197472]  io_uring_setup+0x1fbb/0x2980
[ 2760.198053]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2760.198756]  ? wait_for_completion_io+0x270/0x270
[ 2760.199437]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2760.200166]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2760.201393]  do_syscall_64+0x33/0x40
[ 2760.202306]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2760.203555] RIP: 0033:0x7f5a8776db19
[ 2760.204488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2760.208552] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2760.210218] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2760.211770] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2760.213368] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2760.214972] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2760.216576] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2760.290587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:43:11 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:11 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:11 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:11 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x300}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:11 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:11 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 43)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:11 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2774.000428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2774.007342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:43:11 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2774.012311] FAULT_INJECTION: forcing a failure.
[ 2774.012311] name failslab, interval 1, probability 0, space 0, times 0
[ 2774.014719] CPU: 1 PID: 14663 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2774.016158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2774.017987] Call Trace:
[ 2774.018609]  dump_stack+0x107/0x167
[ 2774.019441]  should_fail.cold+0x5/0xa
[ 2774.020248]  ? xas_alloc+0x336/0x440
[ 2774.021133]  should_failslab+0x5/0x20
[ 2774.022023]  kmem_cache_alloc+0x5b/0x310
[ 2774.022981]  xas_alloc+0x336/0x440
[ 2774.023797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2774.025775]  xas_create+0x34a/0x10d0
[ 2774.026661]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2774.027889]  xas_store+0x8c/0x1c40
[ 2774.028752]  __xa_store+0x164/0x2d0
[ 2774.029611]  ? xa_delete_node+0x280/0x280
[ 2774.030585]  ? trace_hardirqs_on+0x5b/0x180
[ 2774.031604]  xa_store+0x31/0x50
[ 2774.032377]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2774.033512]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2774.034731]  ? alloc_fd+0x2e7/0x670
[ 2774.035595]  io_uring_setup+0x1fbb/0x2980
[ 2774.036577]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2774.037772]  ? wait_for_completion_io+0x270/0x270
[ 2774.038925]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2774.040146]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2774.041359]  do_syscall_64+0x33/0x40
[ 2774.042226]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2774.043424] RIP: 0033:0x7f5a8776db19
[ 2774.044293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2774.048686] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2774.050476] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2774.052139] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2774.053823] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2774.055493] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2774.057166] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2774.080344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:43:11 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:11 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x1100}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:11 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:11 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:11 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 44)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2774.356354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:43:11 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2774.389608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2774.424489] FAULT_INJECTION: forcing a failure.
[ 2774.424489] name failslab, interval 1, probability 0, space 0, times 0
[ 2774.426922] CPU: 1 PID: 14890 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2774.428363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2774.430119] Call Trace:
[ 2774.430683]  dump_stack+0x107/0x167
[ 2774.431460]  should_fail.cold+0x5/0xa
[ 2774.432256]  ? create_object.isra.0+0x3a/0xa20
[ 2774.433242]  should_failslab+0x5/0x20
[ 2774.434044]  kmem_cache_alloc+0x5b/0x310
[ 2774.434905]  ? mark_held_locks+0x9e/0xe0
[ 2774.435771]  create_object.isra.0+0x3a/0xa20
[ 2774.436690]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2774.437769]  kmem_cache_alloc+0x159/0x310
[ 2774.438646]  xas_alloc+0x336/0x440
[ 2774.439393]  xas_create+0x34a/0x10d0
[ 2774.440193]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2774.441307]  xas_store+0x8c/0x1c40
[ 2774.442075]  __xa_store+0x164/0x2d0
[ 2774.442844]  ? xa_delete_node+0x280/0x280
[ 2774.443718]  ? trace_hardirqs_on+0x5b/0x180
[ 2774.444640]  xa_store+0x31/0x50
[ 2774.445345]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2774.446361]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2774.447450]  ? alloc_fd+0x2e7/0x670
[ 2774.448227]  io_uring_setup+0x1fbb/0x2980
[ 2774.449113]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2774.450175]  ? wait_for_completion_io+0x270/0x270
[ 2774.451220]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2774.452322]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2774.453411]  do_syscall_64+0x33/0x40
[ 2774.454190]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2774.455265] RIP: 0033:0x7f5a8776db19
[ 2774.456048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2774.459906] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2774.461514] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2774.463010] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2774.464504] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2774.466017] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2774.467516] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:43:11 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x8800}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:11 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2774.638945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2774.646820] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2787.791246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2787.822248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2787.831430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:43:24 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:24 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:24 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:24 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x80000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2787.843020] FAULT_INJECTION: forcing a failure.
[ 2787.843020] name failslab, interval 1, probability 0, space 0, times 0
[ 2787.845617] CPU: 0 PID: 14920 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2787.847051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2787.848758] Call Trace:
[ 2787.849326]  dump_stack+0x107/0x167
[ 2787.850083]  should_fail.cold+0x5/0xa
[ 2787.850872]  ? xas_alloc+0x336/0x440
[ 2787.851661]  should_failslab+0x5/0x20
[ 2787.852453]  kmem_cache_alloc+0x5b/0x310
[ 2787.853309]  xas_alloc+0x336/0x440
[ 2787.854048]  xas_create+0x34a/0x10d0
[ 2787.854834]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2787.855933]  xas_store+0x8c/0x1c40
[ 2787.856692]  __xa_store+0x164/0x2d0
[ 2787.857479]  ? xa_delete_node+0x280/0x280
[ 2787.858356]  ? trace_hardirqs_on+0x5b/0x180
[ 2787.859275]  xa_store+0x31/0x50
[ 2787.859965]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2787.860960]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2787.862057]  ? alloc_fd+0x2e7/0x670
[ 2787.862829]  io_uring_setup+0x1fbb/0x2980
[ 2787.863696]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2787.864772]  ? wait_for_completion_io+0x270/0x270
[ 2787.865835]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2787.866934]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2787.868031]  do_syscall_64+0x33/0x40
[ 2787.868815]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2787.869910] RIP: 0033:0x7f5a8776db19
[ 2787.870708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2787.873928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2787.874542] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2787.874575] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2787.878752] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2787.880230] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2787.881750] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2787.883239] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:43:24 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:24 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:24 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 45)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:24 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:25 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x1000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:25 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x2000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:25 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2788.063216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:43:25 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()

03:43:25 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x3000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:25 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:25 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:25 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x4000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2788.222757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2788.288035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:43:25 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 46)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:25 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2788.365488] FAULT_INJECTION: forcing a failure.
[ 2788.365488] name failslab, interval 1, probability 0, space 0, times 0
[ 2788.367901] CPU: 0 PID: 14961 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2788.369350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2788.371059] Call Trace:
[ 2788.371608]  dump_stack+0x107/0x167
[ 2788.372365]  should_fail.cold+0x5/0xa
[ 2788.373160]  ? create_object.isra.0+0x3a/0xa20
[ 2788.374126]  should_failslab+0x5/0x20
[ 2788.374917]  kmem_cache_alloc+0x5b/0x310
[ 2788.375757]  ? mark_held_locks+0x9e/0xe0
[ 2788.376610]  create_object.isra.0+0x3a/0xa20
[ 2788.377525]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2788.378577]  kmem_cache_alloc+0x159/0x310
[ 2788.379440]  xas_alloc+0x336/0x440
[ 2788.380187]  xas_create+0x34a/0x10d0
[ 2788.380976]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2788.382058]  xas_store+0x8c/0x1c40
[ 2788.382812]  __xa_store+0x164/0x2d0
[ 2788.383578]  ? xa_delete_node+0x280/0x280
[ 2788.384443]  ? trace_hardirqs_on+0x5b/0x180
[ 2788.385351]  xa_store+0x31/0x50
[ 2788.386040]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2788.387034]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2788.388122]  ? alloc_fd+0x2e7/0x670
[ 2788.388891]  io_uring_setup+0x1fbb/0x2980
[ 2788.389766]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2788.390825]  ? wait_for_completion_io+0x270/0x270
[ 2788.391855]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2788.392937]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2788.394024]  do_syscall_64+0x33/0x40
[ 2788.394790]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2788.395844] RIP: 0033:0x7f5a8776db19
[ 2788.396610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2788.400433] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2788.402015] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2788.403497] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2788.404980] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2788.406460] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2788.407935] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2788.434363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:43:38 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x11000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:38 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2801.168783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:43:38 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 47)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:38 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:38 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2801.187498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2801.197846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2801.204515] FAULT_INJECTION: forcing a failure.
[ 2801.204515] name failslab, interval 1, probability 0, space 0, times 0
[ 2801.207486] CPU: 0 PID: 14983 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2801.209286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2801.211460] Call Trace:
[ 2801.212155]  dump_stack+0x107/0x167
[ 2801.213117]  should_fail.cold+0x5/0xa
[ 2801.214134]  ? xas_alloc+0x336/0x440
[ 2801.215110]  should_failslab+0x5/0x20
[ 2801.216100]  kmem_cache_alloc+0x5b/0x310
[ 2801.217175]  xas_alloc+0x336/0x440
[ 2801.218120]  xas_create+0x34a/0x10d0
[ 2801.219116]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2801.220484]  xas_store+0x8c/0x1c40
[ 2801.221274]  __xa_store+0x164/0x2d0
[ 2801.222232]  ? xa_delete_node+0x280/0x280
[ 2801.223322]  ? trace_hardirqs_on+0x5b/0x180
[ 2801.224454]  xa_store+0x31/0x50
[ 2801.225334]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2801.226582]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2801.227939]  ? alloc_fd+0x2e7/0x670
[ 2801.228899]  io_uring_setup+0x1fbb/0x2980
[ 2801.230003]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2801.231331]  ? wait_for_completion_io+0x270/0x270
[ 2801.232392]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2801.233744]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2801.235092]  do_syscall_64+0x33/0x40
[ 2801.236064]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2801.237397] RIP: 0033:0x7f5a8776db19
[ 2801.238378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2801.243156] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2801.245122] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2801.246988] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2801.248826] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2801.250780] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2801.252539] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2801.254916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:43:38 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x80ffffff}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:38 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:38 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2801.452596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:43:38 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x88000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2801.479930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2801.487593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2801.493930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:43:38 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:38 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0xa4ffffff}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:38 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 48)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:38 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2801.645738] FAULT_INJECTION: forcing a failure.
[ 2801.645738] name failslab, interval 1, probability 0, space 0, times 0
[ 2801.647090] CPU: 1 PID: 15120 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2801.647883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2801.648838] Call Trace:
[ 2801.649151]  dump_stack+0x107/0x167
[ 2801.649567]  should_fail.cold+0x5/0xa
[ 2801.650014]  ? create_object.isra.0+0x3a/0xa20
[ 2801.650536]  should_failslab+0x5/0x20
[ 2801.650977]  kmem_cache_alloc+0x5b/0x310
[ 2801.651442]  ? mark_held_locks+0x9e/0xe0
[ 2801.651905]  create_object.isra.0+0x3a/0xa20
[ 2801.652404]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2801.652995]  kmem_cache_alloc+0x159/0x310
[ 2801.653472]  xas_alloc+0x336/0x440
[ 2801.653894]  xas_create+0x34a/0x10d0
[ 2801.654325]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2801.654921]  xas_store+0x8c/0x1c40
[ 2801.655339]  __xa_store+0x164/0x2d0
[ 2801.655760]  ? xa_delete_node+0x280/0x280
[ 2801.656243]  ? trace_hardirqs_on+0x5b/0x180
[ 2801.656742]  xa_store+0x31/0x50
[ 2801.657123]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2801.657683]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2801.658277]  ? alloc_fd+0x2e7/0x670
[ 2801.658703]  io_uring_setup+0x1fbb/0x2980
[ 2801.659184]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2801.659763]  ? wait_for_completion_io+0x270/0x270
[ 2801.660335]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2801.660928]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2801.661515]  do_syscall_64+0x33/0x40
[ 2801.661952]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2801.662536] RIP: 0033:0x7f5a8776db19
[ 2801.662965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2801.665053] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2801.665928] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2801.666749] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2801.667569] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2801.668380] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2801.669199] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:43:38 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2801.696897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:43:38 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2801.742238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:43:38 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()

03:43:38 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0xffffff80}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:39 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:39 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0xffffffa4}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:39 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 49)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:39 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2802.012183] FAULT_INJECTION: forcing a failure.
[ 2802.012183] name failslab, interval 1, probability 0, space 0, times 0
[ 2802.013528] CPU: 1 PID: 15150 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2802.014330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2802.015275] Call Trace:
[ 2802.015581]  dump_stack+0x107/0x167
[ 2802.015999]  should_fail.cold+0x5/0xa
[ 2802.016437]  ? xas_alloc+0x336/0x440
[ 2802.016868]  should_failslab+0x5/0x20
[ 2802.017305]  kmem_cache_alloc+0x5b/0x310
[ 2802.017791]  xas_alloc+0x336/0x440
[ 2802.018203]  xas_create+0x34a/0x10d0
[ 2802.018644]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2802.019246]  xas_store+0x8c/0x1c40
[ 2802.019664]  __xa_store+0x164/0x2d0
[ 2802.020081]  ? xa_delete_node+0x280/0x280
[ 2802.020577]  ? trace_hardirqs_on+0x5b/0x180
[ 2802.021080]  xa_store+0x31/0x50
[ 2802.021467]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2802.022042]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2802.022647]  ? alloc_fd+0x2e7/0x670
[ 2802.023080]  io_uring_setup+0x1fbb/0x2980
[ 2802.023565]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2802.024148]  ? wait_for_completion_io+0x270/0x270
[ 2802.024716]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2802.025317]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2802.025918]  do_syscall_64+0x33/0x40
[ 2802.026345]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2802.026937] RIP: 0033:0x7f5a8776db19
[ 2802.027373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2802.029464] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2802.030341] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2802.031163] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2802.031987] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2802.032816] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2802.033644] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:43:51 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:51 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2814.775510] __nla_validate_parse: 4 callbacks suppressed
[ 2814.775523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:43:51 executing program 7:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:51 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x8000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:51 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:51 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:43:51 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 50)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:43:51 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2814.802518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2814.810357] FAULT_INJECTION: forcing a failure.
[ 2814.810357] name failslab, interval 1, probability 0, space 0, times 0
[ 2814.813286] CPU: 0 PID: 15174 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2814.815105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2814.816894] Call Trace:
[ 2814.817587]  dump_stack+0x107/0x167
[ 2814.818572]  should_fail.cold+0x5/0xa
[ 2814.819573]  ? ___slab_alloc+0x155/0x700
[ 2814.820627]  ? create_object.isra.0+0x3a/0xa20
[ 2814.821834]  should_failslab+0x5/0x20
[ 2814.822849]  kmem_cache_alloc+0x5b/0x310
[ 2814.823910]  create_object.isra.0+0x3a/0xa20
[ 2814.825046]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2814.826388]  kmem_cache_alloc+0x159/0x310
[ 2814.827493]  xas_alloc+0x336/0x440
[ 2814.828266]  xas_create+0x34a/0x10d0
[ 2814.829255]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2814.830650]  xas_store+0x8c/0x1c40
[ 2814.831604]  __xa_store+0x164/0x2d0
[ 2814.832559]  ? xa_delete_node+0x280/0x280
[ 2814.833664]  ? trace_hardirqs_on+0x5b/0x180
[ 2814.834821]  xa_store+0x31/0x50
[ 2814.835698]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2814.836956]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2814.838325]  ? alloc_fd+0x2e7/0x670
[ 2814.839273]  io_uring_setup+0x1fbb/0x2980
[ 2814.840353]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2814.841649]  ? wait_for_completion_io+0x270/0x270
[ 2814.843013]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2814.844290]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2814.845551]  do_syscall_64+0x33/0x40
[ 2814.846483]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2814.847643] RIP: 0033:0x7f5a8776db19
[ 2814.848406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2814.852243] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2814.853815] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2814.855302] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2814.856784] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2814.858265] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2814.859738] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2814.863944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:43:52 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x100000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:43:52 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab342914876000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2814.979779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 2815.029377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:05 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:05 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2828.438530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:44:05 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:05 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:05 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x200000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:05 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:05 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:05 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 51)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
[ 2828.464626] FAULT_INJECTION: forcing a failure.
[ 2828.464626] name failslab, interval 1, probability 0, space 0, times 0
[ 2828.466108] CPU: 0 PID: 15407 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2828.467008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2828.468062] Call Trace:
[ 2828.468409]  dump_stack+0x107/0x167
[ 2828.468874]  should_fail.cold+0x5/0xa
[ 2828.469364]  ? xas_alloc+0x336/0x440
[ 2828.469846]  should_failslab+0x5/0x20
[ 2828.470329]  kmem_cache_alloc+0x5b/0x310
[ 2828.470862]  xas_alloc+0x336/0x440
[ 2828.471323]  xas_create+0x34a/0x10d0
[ 2828.471804]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2828.472445]  xas_store+0x8c/0x1c40
[ 2828.472900]  __xa_store+0x164/0x2d0
[ 2828.473365]  ? xa_delete_node+0x280/0x280
[ 2828.473889]  ? trace_hardirqs_on+0x5b/0x180
[ 2828.474450]  xa_store+0x31/0x50
[ 2828.474875]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2828.475488]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2828.476150]  ? alloc_fd+0x2e7/0x670
[ 2828.476620]  io_uring_setup+0x1fbb/0x2980
[ 2828.477160]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2828.477771]  ? wait_for_completion_io+0x270/0x270
[ 2828.478391]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2828.479055]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2828.479710]  do_syscall_64+0x33/0x40
[ 2828.480186]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2828.480826] RIP: 0033:0x7f5a8776db19
[ 2828.481296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2828.483637] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2828.484622] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2828.485524] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2828.486384] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2828.486900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2828.487284] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2828.487292] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2828.496733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2828.503297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:44:05 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2828.552387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:05 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x300000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:05 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 52)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:44:05 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 1)

03:44:05 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2828.644961] FAULT_INJECTION: forcing a failure.
[ 2828.644961] name failslab, interval 1, probability 0, space 0, times 0
[ 2828.647382] CPU: 1 PID: 15424 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2828.648839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2828.650579] Call Trace:
[ 2828.651133]  dump_stack+0x107/0x167
[ 2828.651912]  should_fail.cold+0x5/0xa
[ 2828.652706]  ? ___slab_alloc+0x155/0x700
[ 2828.653568]  ? create_object.isra.0+0x3a/0xa20
[ 2828.654539]  should_failslab+0x5/0x20
[ 2828.655338]  kmem_cache_alloc+0x5b/0x310
[ 2828.656188]  create_object.isra.0+0x3a/0xa20
[ 2828.657104]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2828.658167]  kmem_cache_alloc+0x159/0x310
[ 2828.659020]  xas_alloc+0x336/0x440
[ 2828.659767]  xas_create+0x34a/0x10d0
[ 2828.660558]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2828.661669]  xas_store+0x8c/0x1c40
[ 2828.662426]  __xa_store+0x164/0x2d0
[ 2828.663201]  ? xa_delete_node+0x280/0x280
[ 2828.664076]  ? trace_hardirqs_on+0x5b/0x180
[ 2828.664998]  xa_store+0x31/0x50
[ 2828.665695]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2828.666716]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2828.667788]  ? alloc_fd+0x2e7/0x670
[ 2828.668577]  io_uring_setup+0x1fbb/0x2980
[ 2828.669438]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2828.670505]  ? wait_for_completion_io+0x270/0x270
[ 2828.671536]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2828.672645]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2828.673364] FAULT_INJECTION: forcing a failure.
[ 2828.673364] name failslab, interval 1, probability 0, space 0, times 0
[ 2828.673694]  do_syscall_64+0x33/0x40
[ 2828.673716]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2828.673734] RIP: 0033:0x7f5a8776db19
[ 2828.677559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2828.681411] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2828.683001] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2828.684493] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2828.685976] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2828.687468] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2828.688956] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2828.690496] CPU: 0 PID: 15427 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2828.691269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2828.692235] Call Trace:
[ 2828.692554]  dump_stack+0x107/0x167
[ 2828.692994]  should_fail.cold+0x5/0xa
[ 2828.693450]  ? copy_process+0x3285/0x7800
[ 2828.693942]  should_failslab+0x5/0x20
[ 2828.694393]  kmem_cache_alloc_node+0x55/0x330
[ 2828.694899]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2828.695493]  copy_process+0x3285/0x7800
[ 2828.695937]  ? __lock_acquire+0xbb1/0x5b00
[ 2828.696438]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2828.697021]  ? SOFTIRQ_verbose+0x10/0x10
[ 2828.697485]  ? __cleanup_sighand+0xb0/0xb0
[ 2828.697963]  ? lock_acquire+0x197/0x470
[ 2828.698420]  ? find_held_lock+0x2c/0x110
[ 2828.698887]  kernel_clone+0xe7/0x980
[ 2828.699307]  ? lock_downgrade+0x6d0/0x6d0
[ 2828.699762]  ? find_held_lock+0x2c/0x110
[ 2828.700214]  ? create_io_thread+0xf0/0xf0
[ 2828.700685]  ? ksys_write+0x12d/0x260
[ 2828.701119]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2828.701662]  __do_sys_fork+0x8a/0xc0
[ 2828.702075]  ? kernel_thread+0xf0/0xf0
[ 2828.702563]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2828.703150]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2828.703754]  ? trace_hardirqs_on+0x5b/0x180
[ 2828.704237]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2828.704837]  do_syscall_64+0x33/0x40
[ 2828.705256]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2828.705818] RIP: 0033:0x7fcce63d8b19
[ 2828.706257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2828.708241] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2828.709071] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2828.709851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2828.710639] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2828.711465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2828.712246] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2828.780254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:19 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:19 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:19 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:19 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 53)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:44:19 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x400000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:19 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:19 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 2)

03:44:19 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2842.171489] FAULT_INJECTION: forcing a failure.
[ 2842.171489] name failslab, interval 1, probability 0, space 0, times 0
[ 2842.173292] CPU: 1 PID: 15446 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2842.174183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2842.175256] Call Trace:
[ 2842.175608]  dump_stack+0x107/0x167
[ 2842.176092]  should_fail.cold+0x5/0xa
[ 2842.176593]  ? create_object.isra.0+0x3a/0xa20
[ 2842.177191]  should_failslab+0x5/0x20
[ 2842.177687]  kmem_cache_alloc+0x5b/0x310
[ 2842.178232]  create_object.isra.0+0x3a/0xa20
[ 2842.178800]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2842.179482]  kmem_cache_alloc_node+0x169/0x330
[ 2842.180079]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2842.180778]  copy_process+0x3285/0x7800
[ 2842.181309]  ? __lock_acquire+0xbb1/0x5b00
[ 2842.181905]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2842.182603]  ? SOFTIRQ_verbose+0x10/0x10
[ 2842.183165]  ? __cleanup_sighand+0xb0/0xb0
[ 2842.183737]  ? lock_acquire+0x197/0x470
[ 2842.184295]  ? find_held_lock+0x2c/0x110
[ 2842.184842]  kernel_clone+0xe7/0x980
[ 2842.185348]  ? lock_downgrade+0x6d0/0x6d0
[ 2842.185886]  ? find_held_lock+0x2c/0x110
[ 2842.186425]  ? create_io_thread+0xf0/0xf0
[ 2842.186986]  ? ksys_write+0x12d/0x260
[ 2842.187513]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2842.188181]  __do_sys_fork+0x8a/0xc0
[ 2842.188679]  ? kernel_thread+0xf0/0xf0
[ 2842.189224]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2842.189921]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2842.190598]  ? trace_hardirqs_on+0x5b/0x180
[ 2842.191176]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2842.191859]  do_syscall_64+0x33/0x40
[ 2842.192355]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2842.193015] RIP: 0033:0x7fcce63d8b19
[ 2842.193519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2842.195931] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2842.196933] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2842.196970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2842.197846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2842.197857] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2842.197867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2842.197875] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2842.205685] FAULT_INJECTION: forcing a failure.
[ 2842.205685] name failslab, interval 1, probability 0, space 0, times 0
[ 2842.208268] CPU: 1 PID: 15453 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2842.209165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2842.210237] Call Trace:
[ 2842.210584]  dump_stack+0x107/0x167
[ 2842.211064]  should_fail.cold+0x5/0xa
[ 2842.211569]  ? xas_alloc+0x336/0x440
[ 2842.212061]  should_failslab+0x5/0x20
[ 2842.212560]  kmem_cache_alloc+0x5b/0x310
[ 2842.213087]  xas_alloc+0x336/0x440
[ 2842.213548]  xas_create+0x34a/0x10d0
[ 2842.214029]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2842.214698]  xas_store+0x8c/0x1c40
[ 2842.215170]  __xa_store+0x164/0x2d0
[ 2842.215633]  ? xa_delete_node+0x280/0x280
[ 2842.216167]  ? trace_hardirqs_on+0x5b/0x180
[ 2842.216738]  xa_store+0x31/0x50
[ 2842.217166]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2842.217797]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2842.218478]  ? alloc_fd+0x2e7/0x670
[ 2842.218960]  io_uring_setup+0x1fbb/0x2980
[ 2842.219513]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2842.220178]  ? wait_for_completion_io+0x270/0x270
[ 2842.220824]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2842.221498]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2842.222157]  do_syscall_64+0x33/0x40
[ 2842.222633]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2842.223305] RIP: 0033:0x7f5a8776db19
[ 2842.223778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2842.225360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2842.226105] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2842.226118] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2842.226125] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2842.226132] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2842.226139] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2842.226145] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2842.227846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2842.239534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2842.255284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:19 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 54)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:44:19 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x1100000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:19 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2842.370815] FAULT_INJECTION: forcing a failure.
[ 2842.370815] name failslab, interval 1, probability 0, space 0, times 0
[ 2842.372312] CPU: 1 PID: 15540 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2842.373144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2842.374134] Call Trace:
[ 2842.374453]  dump_stack+0x107/0x167
[ 2842.374890]  should_fail.cold+0x5/0xa
[ 2842.375355]  ? create_object.isra.0+0x3a/0xa20
[ 2842.375902]  should_failslab+0x5/0x20
[ 2842.376361]  kmem_cache_alloc+0x5b/0x310
[ 2842.376853]  ? mark_held_locks+0x9e/0xe0
[ 2842.377339]  create_object.isra.0+0x3a/0xa20
[ 2842.377860]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2842.378473]  kmem_cache_alloc+0x159/0x310
[ 2842.378977]  xas_alloc+0x336/0x440
[ 2842.379404]  xas_create+0x34a/0x10d0
[ 2842.379857]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2842.380484]  xas_store+0x8c/0x1c40
[ 2842.380915]  __xa_store+0x164/0x2d0
[ 2842.381366]  ? xa_delete_node+0x280/0x280
[ 2842.381865]  ? trace_hardirqs_on+0x5b/0x180
[ 2842.382382]  xa_store+0x31/0x50
[ 2842.382780]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2842.383360]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2842.383983]  ? alloc_fd+0x2e7/0x670
[ 2842.384425]  io_uring_setup+0x1fbb/0x2980
[ 2842.384922]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2842.385525]  ? wait_for_completion_io+0x270/0x270
[ 2842.386120]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2842.386740]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2842.387365]  do_syscall_64+0x33/0x40
[ 2842.387804]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2842.388417] RIP: 0033:0x7f5a8776db19
[ 2842.388861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2842.391041] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2842.391941] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2842.392786] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2842.393619] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2842.394453] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2842.395298] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:44:19 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2842.480773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:19 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:19 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:19 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 55)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2842.547355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2842.552880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:44:19 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2842.579434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2842.583527] FAULT_INJECTION: forcing a failure.
[ 2842.583527] name failslab, interval 1, probability 0, space 0, times 0
[ 2842.584847] CPU: 1 PID: 15583 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2842.585636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2842.586582] Call Trace:
[ 2842.586886]  dump_stack+0x107/0x167
[ 2842.587313]  should_fail.cold+0x5/0xa
[ 2842.587747]  ? xas_alloc+0x336/0x440
[ 2842.588177]  should_failslab+0x5/0x20
[ 2842.588609]  kmem_cache_alloc+0x5b/0x310
[ 2842.589071]  xas_alloc+0x336/0x440
[ 2842.589476]  xas_create+0x34a/0x10d0
[ 2842.589905]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2842.590500]  xas_store+0x8c/0x1c40
[ 2842.590911]  __xa_store+0x164/0x2d0
[ 2842.591330]  ? xa_delete_node+0x280/0x280
[ 2842.591773]  ? trace_hardirqs_on+0x5b/0x180
[ 2842.592260]  xa_store+0x31/0x50
[ 2842.592643]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2842.593165]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2842.593766]  ? alloc_fd+0x2e7/0x670
[ 2842.594188]  io_uring_setup+0x1fbb/0x2980
[ 2842.594670]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2842.595255]  ? wait_for_completion_io+0x270/0x270
[ 2842.595816]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2842.596414]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2842.597005]  do_syscall_64+0x33/0x40
[ 2842.597429]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2842.598009] RIP: 0033:0x7f5a8776db19
[ 2842.598435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2842.600515] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2842.601376] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2842.602184] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2842.603005] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2842.603780] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2842.604596] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2842.640840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:44:34 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2857.794585] __nla_validate_parse: 1 callbacks suppressed
[ 2857.794593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2857.806811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2857.811947] FAULT_INJECTION: forcing a failure.
[ 2857.811947] name failslab, interval 1, probability 0, space 0, times 0
[ 2857.814434] CPU: 0 PID: 15605 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2857.815887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2857.817628] Call Trace:
[ 2857.818189]  dump_stack+0x107/0x167
[ 2857.818956]  should_fail.cold+0x5/0xa
[ 2857.819768]  ? create_object.isra.0+0x3a/0xa20
[ 2857.820733]  should_failslab+0x5/0x20
[ 2857.821531]  kmem_cache_alloc+0x5b/0x310
[ 2857.822388]  ? mark_held_locks+0x9e/0xe0
[ 2857.823245]  create_object.isra.0+0x3a/0xa20
[ 2857.824172]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2857.825244]  kmem_cache_alloc+0x159/0x310
[ 2857.826120]  xas_alloc+0x336/0x440
[ 2857.826873]  xas_create+0x34a/0x10d0
[ 2857.827671]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2857.828765]  xas_store+0x8c/0x1c40
[ 2857.829525]  __xa_store+0x164/0x2d0
[ 2857.830290]  ? xa_delete_node+0x280/0x280
[ 2857.831162]  ? trace_hardirqs_on+0x5b/0x180
[ 2857.832090]  xa_store+0x31/0x50
[ 2857.832788]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2857.833799]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2857.834893]  ? alloc_fd+0x2e7/0x670
[ 2857.835674]  io_uring_setup+0x1fbb/0x2980
[ 2857.836544]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2857.837623]  ? wait_for_completion_io+0x270/0x270
[ 2857.838662]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2857.839758]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2857.840841]  do_syscall_64+0x33/0x40
[ 2857.841618]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2857.842682] RIP: 0033:0x7f5a8776db19
[ 2857.843469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2857.847312] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2857.848926] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2857.850431] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2857.851930] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2857.853418] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2857.854910] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2857.861727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:34 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:34 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:34 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x80ffffff00000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:34 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:34 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 56)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:44:34 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 3)

03:44:34 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2857.880968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2857.882983] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2857.908679] FAULT_INJECTION: forcing a failure.
03:44:35 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x8800000000000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2857.908679] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2857.910543] CPU: 1 PID: 15611 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2857.911473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2857.912559] Call Trace:
[ 2857.912926]  dump_stack+0x107/0x167
[ 2857.913424]  should_fail.cold+0x5/0xa
[ 2857.913937]  __alloc_pages_nodemask+0x182/0x600
[ 2857.914553]  ? lock_downgrade+0x6d0/0x6d0
[ 2857.915114]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 2857.915933]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2857.916641]  ? kmem_cache_alloc_node+0x2bc/0x330
[ 2857.917259]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2857.917977]  copy_process+0x618/0x7800
[ 2857.918502]  ? __lock_acquire+0xbb1/0x5b00
[ 2857.919094]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2857.919795]  ? SOFTIRQ_verbose+0x10/0x10
[ 2857.920358]  ? __cleanup_sighand+0xb0/0xb0
[ 2857.920922]  ? lock_acquire+0x197/0x470
[ 2857.921468]  ? find_held_lock+0x2c/0x110
[ 2857.922012]  kernel_clone+0xe7/0x980
[ 2857.922503]  ? lock_downgrade+0x6d0/0x6d0
[ 2857.923046]  ? find_held_lock+0x2c/0x110
[ 2857.923598]  ? create_io_thread+0xf0/0xf0
[ 2857.924162]  ? ksys_write+0x12d/0x260
[ 2857.924678]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2857.925330]  __do_sys_fork+0x8a/0xc0
[ 2857.925821]  ? kernel_thread+0xf0/0xf0
[ 2857.926372]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2857.927070]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2857.927764]  ? trace_hardirqs_on+0x5b/0x180
[ 2857.928350]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2857.929032]  do_syscall_64+0x33/0x40
[ 2857.929524]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2857.930201] RIP: 0033:0x7fcce63d8b19
[ 2857.930702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2857.933087] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2857.934065] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2857.935013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2857.935947] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2857.936879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2857.937804] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
03:44:35 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 57)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:44:35 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:35 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2858.070618] FAULT_INJECTION: forcing a failure.
[ 2858.070618] name failslab, interval 1, probability 0, space 0, times 0
[ 2858.073082] CPU: 0 PID: 15724 Comm: syz-executor.6 Not tainted 5.10.232 #1
03:44:35 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2858.074531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2858.076380] Call Trace:
[ 2858.076940]  dump_stack+0x107/0x167
[ 2858.077706]  should_fail.cold+0x5/0xa
[ 2858.078491]  ? xas_alloc+0x336/0x440
[ 2858.079281]  should_failslab+0x5/0x20
[ 2858.080073]  kmem_cache_alloc+0x5b/0x310
[ 2858.080926]  xas_alloc+0x336/0x440
[ 2858.081665]  xas_create+0x34a/0x10d0
[ 2858.082470]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2858.083549]  xas_store+0x8c/0x1c40
[ 2858.084313]  __xa_store+0x164/0x2d0
[ 2858.085057]  ? xa_delete_node+0x280/0x280
[ 2858.085931]  ? trace_hardirqs_on+0x5b/0x180
[ 2858.086817]  xa_store+0x31/0x50
[ 2858.087518]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2858.088497]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2858.089594]  ? alloc_fd+0x2e7/0x670
[ 2858.090352]  io_uring_setup+0x1fbb/0x2980
[ 2858.091235]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2858.092288]  ? wait_for_completion_io+0x270/0x270
[ 2858.093331]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2858.094401]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2858.095501]  do_syscall_64+0x33/0x40
[ 2858.096262]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2858.097331] RIP: 0033:0x7f5a8776db19
[ 2858.098095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2858.101951] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2858.103557] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2858.105047] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2858.106542] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2858.108037] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2858.109520] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:44:35 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2858.114226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2858.136341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:44:35 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0xa4ffffff00000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:35 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 4)

[ 2858.222120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:44:35 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:35 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2858.271672] FAULT_INJECTION: forcing a failure.
[ 2858.271672] name failslab, interval 1, probability 0, space 0, times 0
[ 2858.273206] CPU: 1 PID: 15740 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2858.274008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2858.274966] Call Trace:
[ 2858.275293]  dump_stack+0x107/0x167
[ 2858.275735]  should_fail.cold+0x5/0xa
[ 2858.276186]  ? prepare_creds+0x25/0x5e0
[ 2858.276658]  should_failslab+0x5/0x20
[ 2858.277110]  kmem_cache_alloc+0x5b/0x310
[ 2858.277586]  ? lock_downgrade+0x6d0/0x6d0
[ 2858.278081]  prepare_creds+0x25/0x5e0
[ 2858.278521]  copy_creds+0x72/0x580
[ 2858.278946]  copy_process+0xfdc/0x7800
[ 2858.279413]  ? __lock_acquire+0xbb1/0x5b00
[ 2858.279952]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2858.280579]  ? __cleanup_sighand+0xb0/0xb0
[ 2858.281089]  ? lock_acquire+0x197/0x470
[ 2858.281567]  ? find_held_lock+0x2c/0x110
[ 2858.282049]  kernel_clone+0xe7/0x980
[ 2858.282484]  ? lock_downgrade+0x6d0/0x6d0
[ 2858.282968]  ? find_held_lock+0x2c/0x110
[ 2858.283450]  ? create_io_thread+0xf0/0xf0
[ 2858.283943]  ? ksys_write+0x12d/0x260
[ 2858.284402]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2858.284979]  __do_sys_fork+0x8a/0xc0
[ 2858.285417]  ? kernel_thread+0xf0/0xf0
[ 2858.285900]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2858.286512]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2858.287106]  ? trace_hardirqs_on+0x5b/0x180
[ 2858.287621]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2858.288226]  do_syscall_64+0x33/0x40
[ 2858.288663]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2858.289258] RIP: 0033:0x7fcce63d8b19
[ 2858.289694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2858.291897] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2858.292778] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2858.293593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2858.294411] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2858.295228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2858.296054] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2858.345836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:44:50 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 58)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:44:50 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:50 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:50 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:50 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0xffffffff00000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:50 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 5)

03:44:50 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:50 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2873.022800] FAULT_INJECTION: forcing a failure.
[ 2873.022800] name failslab, interval 1, probability 0, space 0, times 0
[ 2873.024552] CPU: 1 PID: 15757 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2873.025487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2873.026600] Call Trace:
[ 2873.026962]  dump_stack+0x107/0x167
[ 2873.027462]  should_fail.cold+0x5/0xa
[ 2873.028002]  ? create_object.isra.0+0x3a/0xa20
[ 2873.028640]  should_failslab+0x5/0x20
[ 2873.029162]  kmem_cache_alloc+0x5b/0x310
[ 2873.029734]  create_object.isra.0+0x3a/0xa20
[ 2873.030323]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2873.031015]  kmem_cache_alloc+0x159/0x310
[ 2873.031585]  prepare_creds+0x25/0x5e0
[ 2873.032112]  copy_creds+0x72/0x580
[ 2873.032606]  copy_process+0xfdc/0x7800
[ 2873.033137]  ? __lock_acquire+0xbb1/0x5b00
[ 2873.033735]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2873.034470]  ? __cleanup_sighand+0xb0/0xb0
[ 2873.035060]  ? lock_acquire+0x197/0x470
[ 2873.035619]  ? find_held_lock+0x2c/0x110
[ 2873.036185]  kernel_clone+0xe7/0x980
[ 2873.036691]  ? lock_downgrade+0x6d0/0x6d0
[ 2873.037257]  ? find_held_lock+0x2c/0x110
[ 2873.037800]  ? create_io_thread+0xf0/0xf0
[ 2873.038361]  ? ksys_write+0x12d/0x260
[ 2873.038900]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2873.039562]  __do_sys_fork+0x8a/0xc0
[ 2873.040059]  ? kernel_thread+0xf0/0xf0
[ 2873.040613]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2873.041312]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2873.042001]  ? trace_hardirqs_on+0x5b/0x180
[ 2873.042578]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2873.043281]  do_syscall_64+0x33/0x40
[ 2873.043778]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2873.044481] RIP: 0033:0x7fcce63d8b19
[ 2873.044978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2873.047431] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2873.048466] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2873.049427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2873.050373] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2873.051313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2873.052266] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2873.052681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2873.061244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2873.064069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2873.066529] FAULT_INJECTION: forcing a failure.
[ 2873.066529] name failslab, interval 1, probability 0, space 0, times 0
[ 2873.068980] CPU: 0 PID: 15767 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2873.070452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2873.072210] Call Trace:
[ 2873.072795]  dump_stack+0x107/0x167
[ 2873.073643]  should_fail.cold+0x5/0xa
[ 2873.074554]  ? create_object.isra.0+0x3a/0xa20
[ 2873.075545]  should_failslab+0x5/0x20
[ 2873.076378]  kmem_cache_alloc+0x5b/0x310
[ 2873.077218]  ? mark_held_locks+0x9e/0xe0
[ 2873.078076]  create_object.isra.0+0x3a/0xa20
[ 2873.079179]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2873.080393]  kmem_cache_alloc+0x159/0x310
[ 2873.081473]  xas_alloc+0x336/0x440
[ 2873.082370]  xas_create+0x34a/0x10d0
[ 2873.083314]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2873.084683]  xas_store+0x8c/0x1c40
[ 2873.085604]  __xa_store+0x164/0x2d0
[ 2873.086548]  ? xa_delete_node+0x280/0x280
[ 2873.087614]  ? trace_hardirqs_on+0x5b/0x180
[ 2873.088747]  xa_store+0x31/0x50
[ 2873.089624]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2873.090869]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2873.092230]  ? alloc_fd+0x2e7/0x670
[ 2873.093198]  io_uring_setup+0x1fbb/0x2980
[ 2873.094290]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2873.095588]  ? wait_for_completion_io+0x270/0x270
[ 2873.096873]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2873.098218]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2873.099553]  do_syscall_64+0x33/0x40
[ 2873.100527]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2873.101848] RIP: 0033:0x7f5a8776db19
[ 2873.102811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2873.107501] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2873.109453] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2873.111265] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2873.113108] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2873.114936] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2873.116618] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2873.120515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:44:50 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:50 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x2}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:44:50 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:50 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:44:50 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2873.288759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2873.319650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2873.325145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:45:04 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 59)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:04 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:04 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:04 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:04 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x3}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:04 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:04 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 6)

[ 2887.158576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:45:04 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2887.186605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2887.190154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2887.192435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2887.198731] FAULT_INJECTION: forcing a failure.
[ 2887.198731] name failslab, interval 1, probability 0, space 0, times 0
[ 2887.201423] CPU: 0 PID: 16003 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2887.202892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2887.204653] Call Trace:
[ 2887.205235]  dump_stack+0x107/0x167
[ 2887.206027]  should_fail.cold+0x5/0xa
[ 2887.206852]  ? security_prepare_creds+0x112/0x190
[ 2887.207899]  should_failslab+0x5/0x20
[ 2887.208720]  __kmalloc+0x72/0x390
[ 2887.209492]  security_prepare_creds+0x112/0x190
[ 2887.210499]  prepare_creds+0x452/0x5e0
[ 2887.211354]  copy_creds+0x72/0x580
[ 2887.212135]  copy_process+0xfdc/0x7800
[ 2887.212998]  ? __lock_acquire+0xbb1/0x5b00
[ 2887.213974]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2887.215131]  ? __cleanup_sighand+0xb0/0xb0
[ 2887.216066]  ? lock_acquire+0x197/0x470
[ 2887.216966]  ? find_held_lock+0x2c/0x110
[ 2887.217866]  kernel_clone+0xe7/0x980
[ 2887.218674]  ? lock_downgrade+0x6d0/0x6d0
[ 2887.219570]  ? find_held_lock+0x2c/0x110
[ 2887.220462]  ? create_io_thread+0xf0/0xf0
[ 2887.221365]  ? ksys_write+0x12d/0x260
[ 2887.222221]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2887.223286]  __do_sys_fork+0x8a/0xc0
[ 2887.224091]  ? kernel_thread+0xf0/0xf0
[ 2887.224988]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2887.226107]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2887.227204]  ? trace_hardirqs_on+0x5b/0x180
[ 2887.228134]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2887.229245]  do_syscall_64+0x33/0x40
[ 2887.230048]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2887.231133] RIP: 0033:0x7fcce63d8b19
[ 2887.231933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2887.235820] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2887.237451] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2887.238969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2887.240494] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2887.242004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2887.243515] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2887.251754] FAULT_INJECTION: forcing a failure.
[ 2887.251754] name failslab, interval 1, probability 0, space 0, times 0
[ 2887.254205] CPU: 0 PID: 16015 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2887.255675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2887.257433] Call Trace:
[ 2887.257991]  dump_stack+0x107/0x167
[ 2887.258761]  should_fail.cold+0x5/0xa
[ 2887.259565]  ? create_object.isra.0+0x3a/0xa20
[ 2887.260546]  should_failslab+0x5/0x20
[ 2887.261351]  kmem_cache_alloc+0x5b/0x310
[ 2887.262208]  ? mark_held_locks+0x9e/0xe0
[ 2887.263068]  create_object.isra.0+0x3a/0xa20
[ 2887.263993]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2887.265086]  kmem_cache_alloc+0x159/0x310
[ 2887.265982]  xas_alloc+0x336/0x440
[ 2887.266743]  xas_create+0x34a/0x10d0
[ 2887.267547]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2887.268671]  xas_store+0x8c/0x1c40
[ 2887.269440]  __xa_store+0x164/0x2d0
[ 2887.270221]  ? xa_delete_node+0x280/0x280
[ 2887.271110]  ? trace_hardirqs_on+0x5b/0x180
[ 2887.272030]  xa_store+0x31/0x50
[ 2887.272741]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2887.273754]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2887.274850]  ? alloc_fd+0x2e7/0x670
[ 2887.275630]  io_uring_setup+0x1fbb/0x2980
[ 2887.276521]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2887.277589]  ? wait_for_completion_io+0x270/0x270
03:45:04 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2887.278627]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2887.279947]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2887.281054]  do_syscall_64+0x33/0x40
[ 2887.281839]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2887.282919] RIP: 0033:0x7f5a8776db19
[ 2887.283707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2887.287586] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2887.289199] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2887.290703] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2887.292208] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2887.293720] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2887.295225] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:45:04 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x4}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2887.348905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:45:04 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:04 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2887.405689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2887.408840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:45:04 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x8}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:04 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 60)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:04 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:04 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x11}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:04 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:04 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2887.605297] FAULT_INJECTION: forcing a failure.
[ 2887.605297] name failslab, interval 1, probability 0, space 0, times 0
[ 2887.607789] CPU: 0 PID: 16143 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2887.609266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2887.611024] Call Trace:
[ 2887.611585]  dump_stack+0x107/0x167
[ 2887.612354]  should_fail.cold+0x5/0xa
[ 2887.613169]  ? ___slab_alloc+0x155/0x700
[ 2887.614023]  ? create_object.isra.0+0x3a/0xa20
[ 2887.614993]  should_failslab+0x5/0x20
[ 2887.615789]  kmem_cache_alloc+0x5b/0x310
[ 2887.616658]  create_object.isra.0+0x3a/0xa20
[ 2887.617580]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2887.618653]  kmem_cache_alloc+0x159/0x310
[ 2887.619532]  xas_alloc+0x336/0x440
[ 2887.620298]  xas_create+0x34a/0x10d0
[ 2887.621103]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2887.622222]  xas_store+0x8c/0x1c40
[ 2887.622992]  __xa_store+0x164/0x2d0
[ 2887.623762]  ? xa_delete_node+0x280/0x280
[ 2887.624651]  ? trace_hardirqs_on+0x5b/0x180
[ 2887.625570]  xa_store+0x31/0x50
[ 2887.626272]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2887.627291]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2887.628394]  ? alloc_fd+0x2e7/0x670
[ 2887.629181]  io_uring_setup+0x1fbb/0x2980
[ 2887.630070]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2887.631135]  ? wait_for_completion_io+0x270/0x270
[ 2887.632201]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2887.633316]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2887.634404]  do_syscall_64+0x33/0x40
[ 2887.635189]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2887.636263] RIP: 0033:0x7f5a8776db19
[ 2887.637050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2887.640930] RSP: 002b:00007f5a84ce3108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2887.642520] RAX: ffffffffffffffda RBX: 00007f5a87880f60 RCX: 00007f5a8776db19
[ 2887.644010] RDX: 0000000020ffc000 RSI: 0000000020000100 RDI: 00000000000068d4
[ 2887.645512] RBP: 0000000020000100 R08: 0000000020000040 R09: 0000000020000040
[ 2887.647011] R10: 0000000020000080 R11: 0000000000000202 R12: 0000000020000040
[ 2887.648513] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2887.678436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2887.690595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2887.698922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:45:19 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:19 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:19 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x88}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:19 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:19 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 7)

03:45:19 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:19 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 61)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:19 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2902.208156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2902.213664] FAULT_INJECTION: forcing a failure.
[ 2902.213664] name failslab, interval 1, probability 0, space 0, times 0
[ 2902.215555] CPU: 1 PID: 16167 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2902.216528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2902.217693] Call Trace:
[ 2902.218083]  dump_stack+0x107/0x167
[ 2902.218614]  should_fail.cold+0x5/0xa
[ 2902.219169]  ? create_object.isra.0+0x3a/0xa20
[ 2902.219821]  should_failslab+0x5/0x20
[ 2902.220385]  kmem_cache_alloc+0x5b/0x310
[ 2902.220989]  create_object.isra.0+0x3a/0xa20
[ 2902.221604]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2902.222337]  __kmalloc+0x16e/0x390
[ 2902.222857]  security_prepare_creds+0x112/0x190
[ 2902.223532]  prepare_creds+0x452/0x5e0
[ 2902.224082]  copy_creds+0x72/0x580
[ 2902.224588]  copy_process+0xfdc/0x7800
[ 2902.225162]  ? __lock_acquire+0xbb1/0x5b00
[ 2902.225799]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2902.226563]  ? __cleanup_sighand+0xb0/0xb0
[ 2902.227185]  ? lock_acquire+0x197/0x470
[ 2902.227760]  ? find_held_lock+0x2c/0x110
[ 2902.228354]  kernel_clone+0xe7/0x980
[ 2902.228898]  ? lock_downgrade+0x6d0/0x6d0
[ 2902.229490]  ? find_held_lock+0x2c/0x110
[ 2902.230062]  ? create_io_thread+0xf0/0xf0
[ 2902.230667]  ? ksys_write+0x12d/0x260
[ 2902.231256]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2902.231958]  __do_sys_fork+0x8a/0xc0
[ 2902.232484]  ? kernel_thread+0xf0/0xf0
[ 2902.233075]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2902.233819]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2902.234527]  ? trace_hardirqs_on+0x5b/0x180
[ 2902.235130]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2902.235859]  do_syscall_64+0x33/0x40
[ 2902.236391]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2902.237124] RIP: 0033:0x7fcce63d8b19
[ 2902.237640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2902.240179] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2902.241263] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2902.242262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2902.243253] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2902.244225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2902.245217] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2902.250689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2902.256452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2902.258246] FAULT_INJECTION: forcing a failure.
[ 2902.258246] name failslab, interval 1, probability 0, space 0, times 0
[ 2902.261059] CPU: 0 PID: 16174 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2902.262533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2902.264277] Call Trace:
[ 2902.264866]  dump_stack+0x107/0x167
[ 2902.265646]  should_fail.cold+0x5/0xa
[ 2902.266457]  ? vm_area_dup+0x78/0x290
[ 2902.267278]  should_failslab+0x5/0x20
[ 2902.268089]  kmem_cache_alloc+0x5b/0x310
[ 2902.268977]  vm_area_dup+0x78/0x290
[ 2902.269758]  ? lock_release+0x680/0x680
[ 2902.270613]  ? mark_lock+0xf5/0x2df0
[ 2902.271421]  ? lock_chain_count+0x20/0x20
[ 2902.272298]  ? mark_lock+0xf5/0x2df0
[ 2902.273111]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2902.274232]  ? lock_chain_count+0x20/0x20
[ 2902.275120]  ? mark_lock+0xf5/0x2df0
[ 2902.275912]  ? vm_area_alloc+0x110/0x110
[ 2902.276781]  ? __lock_acquire+0x1657/0x5b00
[ 2902.277740]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2902.278859]  ? SOFTIRQ_verbose+0x10/0x10
[ 2902.279724]  ? vmacache_find+0x55/0x2a0
[ 2902.280574]  __split_vma+0xa8/0x4e0
[ 2902.281371]  __do_munmap+0x365/0x1260
[ 2902.282198]  ? arch_get_unmapped_area+0x450/0x450
[ 2902.283222]  ? lock_release+0x680/0x680
[ 2902.284076]  mmap_region+0x7c8/0x1500
[ 2902.284930]  do_mmap+0xcdb/0x11e0
[ 2902.285685]  vm_mmap_pgoff+0x198/0x1f0
[ 2902.286529]  ? randomize_page+0xb0/0xb0
[ 2902.287395]  ksys_mmap_pgoff+0x41c/0x560
[ 2902.288271]  ? find_mergeable_anon_vma+0x250/0x250
[ 2902.289329]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2902.290448]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2902.291547]  do_syscall_64+0x33/0x40
[ 2902.292349]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2902.293443] RIP: 0033:0x7f5a8776db62
[ 2902.294241] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2902.298109] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2902.299724] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2902.301234] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2902.302736] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2902.304240] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2902.305779] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:45:19 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:19 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x300}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2902.390946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:45:19 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:19 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:19 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2902.464412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2902.492696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2902.521241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:45:19 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x1100}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:19 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 62)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:19 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 8)

[ 2902.642745] FAULT_INJECTION: forcing a failure.
[ 2902.642745] name failslab, interval 1, probability 0, space 0, times 0
[ 2902.644513] CPU: 1 PID: 16404 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2902.645061] FAULT_INJECTION: forcing a failure.
[ 2902.645061] name failslab, interval 1, probability 0, space 0, times 0
[ 2902.645364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2902.645379] Call Trace:
[ 2902.649069]  dump_stack+0x107/0x167
[ 2902.649522]  should_fail.cold+0x5/0xa
[ 2902.649986]  ? __delayacct_tsk_init+0x1b/0x80
[ 2902.650536]  should_failslab+0x5/0x20
[ 2902.651001]  kmem_cache_alloc+0x5b/0x310
[ 2902.651490]  ? prepare_creds+0x466/0x5e0
[ 2902.652001]  __delayacct_tsk_init+0x1b/0x80
[ 2902.652524]  copy_process+0x3319/0x7800
[ 2902.653028]  ? __lock_acquire+0xbb1/0x5b00
[ 2902.653585]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2902.654233]  ? __cleanup_sighand+0xb0/0xb0
[ 2902.654771]  ? lock_acquire+0x197/0x470
[ 2902.655278]  ? find_held_lock+0x2c/0x110
[ 2902.655775]  kernel_clone+0xe7/0x980
[ 2902.656231]  ? lock_downgrade+0x6d0/0x6d0
[ 2902.656724]  ? find_held_lock+0x2c/0x110
[ 2902.657232]  ? create_io_thread+0xf0/0xf0
[ 2902.657745]  ? ksys_write+0x12d/0x260
[ 2902.658224]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2902.658824]  __do_sys_fork+0x8a/0xc0
[ 2902.659268]  ? kernel_thread+0xf0/0xf0
[ 2902.659761]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2902.660399]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2902.661031]  ? trace_hardirqs_on+0x5b/0x180
[ 2902.661559]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2902.662187]  do_syscall_64+0x33/0x40
[ 2902.662648]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2902.663261] RIP: 0033:0x7fcce63d8b19
[ 2902.663705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2902.665917] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2902.666830] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2902.667694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2902.668551] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2902.669412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2902.670262] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
[ 2902.671165] CPU: 0 PID: 16407 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2902.672634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2902.674406] Call Trace:
[ 2902.674967]  dump_stack+0x107/0x167
[ 2902.675744]  should_fail.cold+0x5/0xa
[ 2902.676553]  ? create_object.isra.0+0x3a/0xa20
[ 2902.677534]  should_failslab+0x5/0x20
[ 2902.678339]  kmem_cache_alloc+0x5b/0x310
[ 2902.679203]  create_object.isra.0+0x3a/0xa20
[ 2902.680129]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2902.681229]  kmem_cache_alloc+0x159/0x310
[ 2902.682122]  vm_area_dup+0x78/0x290
[ 2902.682890]  ? SOFTIRQ_verbose+0x10/0x10
[ 2902.683757]  ? mark_lock+0xf5/0x2df0
[ 2902.684555]  ? lock_chain_count+0x20/0x20
[ 2902.685438]  ? mark_lock+0xf5/0x2df0
[ 2902.686240]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2902.687350]  ? lock_chain_count+0x20/0x20
[ 2902.688225]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2902.689192]  ? trace_hardirqs_on+0x5b/0x180
[ 2902.690106]  ? mark_lock+0xf5/0x2df0
[ 2902.690901]  ? vm_area_alloc+0x110/0x110
[ 2902.691763]  ? __lock_acquire+0x1657/0x5b00
[ 2902.692696]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2902.693825]  ? SOFTIRQ_verbose+0x10/0x10
[ 2902.694682]  ? vmacache_find+0x55/0x2a0
[ 2902.695521]  __split_vma+0xa8/0x4e0
[ 2902.696290]  __do_munmap+0x365/0x1260
[ 2902.697113]  ? arch_get_unmapped_area+0x450/0x450
[ 2902.698134]  ? lock_release+0x680/0x680
[ 2902.698977]  mmap_region+0x7c8/0x1500
[ 2902.699797]  do_mmap+0xcdb/0x11e0
[ 2902.700545]  vm_mmap_pgoff+0x198/0x1f0
[ 2902.701381]  ? randomize_page+0xb0/0xb0
[ 2902.702238]  ksys_mmap_pgoff+0x41c/0x560
[ 2902.703100]  ? find_mergeable_anon_vma+0x250/0x250
[ 2902.704145]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2902.705263]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2902.706357]  do_syscall_64+0x33/0x40
[ 2902.707143]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2902.708227] RIP: 0033:0x7f5a8776db62
[ 2902.709019] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2902.712912] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2902.714515] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2902.716023] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2902.717552] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2902.719057] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2902.720561] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2902.784626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:45:37 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:37 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2920.064615] FAULT_INJECTION: forcing a failure.
[ 2920.064615] name failslab, interval 1, probability 0, space 0, times 0
[ 2920.067056] CPU: 0 PID: 16424 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2920.067339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2920.068458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2920.068464] Call Trace:
[ 2920.068488]  dump_stack+0x107/0x167
[ 2920.068513]  should_fail.cold+0x5/0xa
[ 2920.070768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2920.072029]  ? anon_vma_clone+0xdc/0x590
[ 2920.072057]  should_failslab+0x5/0x20
[ 2920.072075]  kmem_cache_alloc+0x5b/0x310
[ 2920.072102]  anon_vma_clone+0xdc/0x590
[ 2920.078892]  __split_vma+0x17c/0x4e0
[ 2920.079646]  __do_munmap+0x365/0x1260
[ 2920.080426]  ? arch_get_unmapped_area+0x450/0x450
[ 2920.081415]  ? lock_release+0x680/0x680
[ 2920.082231]  mmap_region+0x7c8/0x1500
[ 2920.082265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2920.083007]  do_mmap+0xcdb/0x11e0
[ 2920.085462]  vm_mmap_pgoff+0x198/0x1f0
[ 2920.086252]  ? randomize_page+0xb0/0xb0
[ 2920.087067]  ksys_mmap_pgoff+0x41c/0x560
[ 2920.087892]  ? find_mergeable_anon_vma+0x250/0x250
[ 2920.088510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2920.088885]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2920.091690]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2920.092724]  do_syscall_64+0x33/0x40
[ 2920.093481]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2920.094509] RIP: 0033:0x7f5a8776db62
[ 2920.095257] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2920.098966] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2920.100495] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2920.101949] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2920.103387] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2920.104806] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2920.106239] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2920.127885] FAULT_INJECTION: forcing a failure.
[ 2920.127885] name failslab, interval 1, probability 0, space 0, times 0
[ 2920.130524] CPU: 0 PID: 16423 Comm: syz-executor.7 Not tainted 5.10.232 #1
[ 2920.131900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2920.133601] Call Trace:
[ 2920.134148]  dump_stack+0x107/0x167
[ 2920.134907]  should_fail.cold+0x5/0xa
[ 2920.135699]  ? create_object.isra.0+0x3a/0xa20
[ 2920.136643]  should_failslab+0x5/0x20
[ 2920.137435]  kmem_cache_alloc+0x5b/0x310
[ 2920.138297]  create_object.isra.0+0x3a/0xa20
[ 2920.139194]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2920.140243]  kmem_cache_alloc+0x159/0x310
[ 2920.141090]  ? prepare_creds+0x466/0x5e0
[ 2920.141961]  __delayacct_tsk_init+0x1b/0x80
[ 2920.142841]  copy_process+0x3319/0x7800
[ 2920.143651]  ? __lock_acquire+0xbb1/0x5b00
[ 2920.144555]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2920.145639]  ? __cleanup_sighand+0xb0/0xb0
[ 2920.146500]  ? lock_acquire+0x197/0x470
[ 2920.147327]  ? find_held_lock+0x2c/0x110
[ 2920.148157]  kernel_clone+0xe7/0x980
[ 2920.148901]  ? lock_downgrade+0x6d0/0x6d0
[ 2920.149728]  ? find_held_lock+0x2c/0x110
[ 2920.150546]  ? create_io_thread+0xf0/0xf0
[ 2920.151392]  ? ksys_write+0x12d/0x260
[ 2920.152178]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2920.153161]  __do_sys_fork+0x8a/0xc0
[ 2920.153909]  ? kernel_thread+0xf0/0xf0
[ 2920.154730]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2920.155778]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2920.156795]  ? trace_hardirqs_on+0x5b/0x180
[ 2920.157666]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2920.158689]  do_syscall_64+0x33/0x40
[ 2920.159432]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2920.160449] RIP: 0033:0x7fcce63d8b19
[ 2920.161188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2920.164810] RSP: 002b:00007fcce394e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2920.166327] RAX: ffffffffffffffda RBX: 00007fcce64ebf60 RCX: 00007fcce63d8b19
[ 2920.167986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2920.169376] RBP: 00007fcce394e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2920.170787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2920.172177] R13: 00007ffd90eb423f R14: 00007fcce394e300 R15: 0000000000022000
03:45:37 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 63)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:37 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 9)

03:45:37 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:37 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x8800}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:37 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:37 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:37 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2920.252891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:45:37 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x80000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:37 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:37 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 64)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 2920.447336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2920.477907] FAULT_INJECTION: forcing a failure.
[ 2920.477907] name failslab, interval 1, probability 0, space 0, times 0
[ 2920.480523] CPU: 1 PID: 16451 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2920.481982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2920.483716] Call Trace:
[ 2920.484271]  dump_stack+0x107/0x167
[ 2920.485035]  should_fail.cold+0x5/0xa
[ 2920.485854]  ? create_object.isra.0+0x3a/0xa20
[ 2920.486818]  should_failslab+0x5/0x20
[ 2920.487619]  kmem_cache_alloc+0x5b/0x310
[ 2920.488480]  create_object.isra.0+0x3a/0xa20
[ 2920.489398]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2920.490476]  kmem_cache_alloc+0x159/0x310
[ 2920.491355]  anon_vma_clone+0xdc/0x590
[ 2920.492185]  __split_vma+0x17c/0x4e0
[ 2920.492965]  __do_munmap+0x365/0x1260
[ 2920.493774]  ? arch_get_unmapped_area+0x450/0x450
[ 2920.494794]  ? lock_release+0x680/0x680
[ 2920.495634]  mmap_region+0x7c8/0x1500
[ 2920.496450]  do_mmap+0xcdb/0x11e0
[ 2920.497187]  vm_mmap_pgoff+0x198/0x1f0
[ 2920.498014]  ? randomize_page+0xb0/0xb0
[ 2920.498864]  ksys_mmap_pgoff+0x41c/0x560
[ 2920.499721]  ? find_mergeable_anon_vma+0x250/0x250
[ 2920.500756]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2920.501865]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2920.502952]  do_syscall_64+0x33/0x40
[ 2920.503735]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2920.504805] RIP: 0033:0x7f5a8776db62
[ 2920.505594] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2920.509467] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2920.511069] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2920.512570] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2920.514073] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2920.515563] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2920.517057] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2920.553978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2935.539385] FAULT_INJECTION: forcing a failure.
[ 2935.539385] name failslab, interval 1, probability 0, space 0, times 0
[ 2935.542060] CPU: 1 PID: 16461 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2935.543100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2935.543622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2935.543635] Call Trace:
[ 2935.547227]  dump_stack+0x107/0x167
[ 2935.548050]  should_fail.cold+0x5/0xa
[ 2935.548910]  ? ___slab_alloc+0x155/0x700
[ 2935.549830]  ? create_object.isra.0+0x3a/0xa20
[ 2935.550873]  should_failslab+0x5/0x20
[ 2935.552171]  kmem_cache_alloc+0x5b/0x310
[ 2935.553095]  create_object.isra.0+0x3a/0xa20
[ 2935.554096]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2935.555247]  kmem_cache_alloc+0x159/0x310
[ 2935.556196]  anon_vma_clone+0xdc/0x590
[ 2935.557087]  __split_vma+0x17c/0x4e0
[ 2935.557950]  __do_munmap+0x365/0x1260
[ 2935.558821]  ? arch_get_unmapped_area+0x450/0x450
[ 2935.559918]  ? lock_release+0x680/0x680
03:45:52 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 10)

03:45:52 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:52 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:52 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 65)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:52 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x1000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:52 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:52 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
[ 2935.561066]  mmap_region+0x7c8/0x1500
[ 2935.562053]  do_mmap+0xcdb/0x11e0
[ 2935.562854]  vm_mmap_pgoff+0x198/0x1f0
[ 2935.563806]  ? randomize_page+0xb0/0xb0
[ 2935.564744]  ksys_mmap_pgoff+0x41c/0x560
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:52 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2935.565672]  ? find_mergeable_anon_vma+0x250/0x250
[ 2935.566907]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2935.568096]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2935.569261]  do_syscall_64+0x33/0x40
[ 2935.570122]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2935.571283] RIP: 0033:0x7f5a8776db62
[ 2935.572110] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2935.576252] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2935.577957] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2935.579562] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2935.581167] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2935.582766] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2935.584362] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2935.593612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2935.600235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
03:45:52 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x2000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2935.623795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2935.702364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:45:52 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x3000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:52 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:45:52 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:52 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 66)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:45:52 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2935.810640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2935.825583] FAULT_INJECTION: forcing a failure.
[ 2935.825583] name failslab, interval 1, probability 0, space 0, times 0
[ 2935.826932] CPU: 0 PID: 16595 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2935.827732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2935.828696] Call Trace:
[ 2935.829004]  dump_stack+0x107/0x167
[ 2935.829428]  should_fail.cold+0x5/0xa
[ 2935.829863]  ? create_object.isra.0+0x3a/0xa20
[ 2935.830394]  should_failslab+0x5/0x20
[ 2935.830829]  kmem_cache_alloc+0x5b/0x310
[ 2935.831295]  create_object.isra.0+0x3a/0xa20
[ 2935.831800]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2935.832395]  kmem_cache_alloc+0x159/0x310
[ 2935.832885]  vm_area_alloc+0x1c/0x110
[ 2935.833331]  mmap_region+0x97e/0x1500
[ 2935.833778]  do_mmap+0xcdb/0x11e0
[ 2935.834193]  vm_mmap_pgoff+0x198/0x1f0
[ 2935.834638]  ? randomize_page+0xb0/0xb0
[ 2935.835101]  ksys_mmap_pgoff+0x41c/0x560
[ 2935.835566]  ? find_mergeable_anon_vma+0x250/0x250
[ 2935.836135]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2935.836734]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2935.837330]  do_syscall_64+0x33/0x40
[ 2935.837756]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2935.838356] RIP: 0033:0x7f5a8776db62
[ 2935.838776] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2935.840870] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2935.841740] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2935.842567] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2935.843374] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2935.844184] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2935.844985] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
03:45:53 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2935.893888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.
03:45:53 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x4000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2935.928841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:45:53 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:45:53 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x11000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:46:07 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:46:07 executing program 6:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (fail_nth: 67)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:46:07 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:46:07 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:46:07 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:46:07 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x80ffffff}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:46:07 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
io_uring_enter(r0, 0x3be, 0x6802, 0x2, &(0x7f0000000240)={[0x3f]}, 0x8)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000200)=0x800)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1f, 0x7f, 0x8, 0x1, 0x0, 0x8, 0x500, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x40, 0x0, 0x1, 0x8, 0x1, 0x4, 0x3f, 0x0, 0x6, 0x0, 0x100000001}, 0x0, 0xc, r1, 0x9)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:46:07 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2950.412337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2950.418881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2950.427879] FAULT_INJECTION: forcing a failure.
03:46:07 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0x88000000}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[ 2950.427879] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2950.431020] CPU: 0 PID: 16628 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2950.432463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2950.434208] Call Trace:
[ 2950.434786]  dump_stack+0x107/0x167
[ 2950.435564]  should_fail.cold+0x5/0xa
[ 2950.436385]  __alloc_pages_nodemask+0x182/0x600
[ 2950.437378]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 2950.438661]  ? walk_mem_res+0x170/0x170
[ 2950.439514]  alloc_pages_current+0x187/0x280
[ 2950.440443]  pte_alloc_one+0x16/0x1a0
[ 2950.441253]  __pte_alloc+0x1d/0x330
[ 2950.442026]  remap_pfn_range_internal+0x9a3/0xf60
[ 2950.443064]  ? lookup_memtype+0x5b/0x200
[ 2950.443951]  ? apply_to_existing_page_range+0x40/0x40
[ 2950.445060]  remap_pfn_range+0xcd/0x160
[ 2950.445903]  ? remap_pfn_range_notrack+0x70/0x70
[ 2950.446920]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2950.448026]  io_uring_mmap+0x398/0x530
[ 2950.448852]  mmap_file+0x5e/0xe0
[ 2950.449573]  mmap_region+0xc49/0x1500
[ 2950.450412]  do_mmap+0xcdb/0x11e0
[ 2950.451159]  vm_mmap_pgoff+0x198/0x1f0
[ 2950.451990]  ? randomize_page+0xb0/0xb0
[ 2950.452849]  ksys_mmap_pgoff+0x41c/0x560
[ 2950.453717]  ? find_mergeable_anon_vma+0x250/0x250
[ 2950.454772]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2950.455881]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2950.456969]  do_syscall_64+0x33/0x40
[ 2950.457759]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2950.458851] RIP: 0033:0x7f5a8776db62
[ 2950.459643] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2950.463501] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2950.465098] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2950.466608] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2950.468104] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2950.469604] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2950.471106] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2950.478636] ------------[ cut here ]------------
[ 2950.479735] WARNING: CPU: 0 PID: 16628 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270
[ 2950.481649] Modules linked in:
[ 2950.482544] CPU: 0 PID: 16628 Comm: syz-executor.6 Not tainted 5.10.232 #1
[ 2950.484402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2950.486685] RIP: 0010:get_pat_info+0x216/0x270
[ 2950.487930] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 61 82 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 4a 82 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 05 78 5a 00 e9
[ 2950.497508] RSP: 0018:ffff8880688b7898 EFLAGS: 00010212
[ 2950.498855] RAX: 0000000000012d8d RBX: ffff88804f370300 RCX: ffffc90004e16000
[ 2950.500533] RDX: 0000000000040000 RSI: ffffffff81123696 RDI: 0000000000000007
[ 2950.502095] RBP: ffff8880688b7950 R08: 0000000000000000 R09: ffff8880688b7820
[ 2950.503644] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028
[ 2950.505182] R13: 1ffff1100d116f13 R14: 0000000000000000 R15: ffff88804f370350
[ 2950.506737] FS:  00007f5a84ce3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 2950.510170] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2950.511450] CR2: 00007fcce68f0004 CR3: 0000000010660000 CR4: 0000000000350ef0
[ 2950.513007] Call Trace:
[ 2950.513567]  ? __warn+0xe2/0x1f0
[ 2950.514322]  ? get_pat_info+0x216/0x270
[ 2950.515207]  ? report_bug+0x1c1/0x210
[ 2950.516060]  ? handle_bug+0x41/0x90
[ 2950.516827]  ? exc_invalid_op+0x14/0x50
[ 2950.517704]  ? asm_exc_invalid_op+0x12/0x20
[ 2950.518669]  ? get_pat_info+0x216/0x270
[ 2950.519539]  ? get_pat_info+0x216/0x270
[ 2950.520418]  ? get_pat_info+0x216/0x270
[ 2950.521291]  ? pgprot_writethrough+0xc0/0xc0
[ 2950.522260]  ? finish_task_switch+0x126/0x5d0
[ 2950.523269]  untrack_pfn+0xdc/0x240
[ 2950.524071]  ? track_pfn_insert+0x150/0x150
[ 2950.525017]  ? lock_downgrade+0x6d0/0x6d0
[ 2950.525917]  ? uprobe_munmap+0x1c/0x560
[ 2950.526813]  unmap_single_vma+0x1bc/0x300
[ 2950.527747]  zap_page_range_single+0x2ce/0x450
[ 2950.528748]  ? unmap_single_vma+0x300/0x300
[ 2950.529685]  ? remap_pfn_range_internal+0xc56/0xf60
[ 2950.530783]  ? lookup_memtype+0x5b/0x200
[ 2950.531684]  ? apply_to_existing_page_range+0x40/0x40
[ 2950.532830]  remap_pfn_range+0x139/0x160
[ 2950.533723]  ? remap_pfn_range_notrack+0x70/0x70
[ 2950.534775]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2950.535900]  io_uring_mmap+0x398/0x530
[ 2950.536765]  mmap_file+0x5e/0xe0
[ 2950.537516]  mmap_region+0xc49/0x1500
[ 2950.538371]  do_mmap+0xcdb/0x11e0
[ 2950.539159]  vm_mmap_pgoff+0x198/0x1f0
[ 2950.540020]  ? randomize_page+0xb0/0xb0
[ 2950.540882]  ksys_mmap_pgoff+0x41c/0x560
[ 2950.541771]  ? find_mergeable_anon_vma+0x250/0x250
[ 2950.542857]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2950.544016]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2950.545164]  do_syscall_64+0x33/0x40
[ 2950.545954]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2950.547091] RIP: 0033:0x7f5a8776db62
[ 2950.547883] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2950.551822] RSP: 002b:00007f5a84ce30f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2950.553463] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5a8776db62
[ 2950.555017] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2950.556580] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000
[ 2950.558132] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000040
[ 2950.559687] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020ffc000
[ 2950.561252] irq event stamp: 1733
[ 2950.561996] hardirqs last  enabled at (1741): [<ffffffff8129a8bd>] console_unlock+0x92d/0xb40
[ 2950.563863] hardirqs last disabled at (1752): [<ffffffff8129a7c9>] console_unlock+0x839/0xb40
[ 2950.565704] softirqs last  enabled at (1260): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 2950.567635] softirqs last disabled at (1159): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 2950.569536] ---[ end trace 9702266cda1dfc87 ]---
[ 2950.582572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
03:46:07 executing program 2:
rename(&(0x7f00000006c0)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1ff}, {0x0, 0xa4ffffff}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:46:07 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
fcntl$getflags(r1, 0x40a)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4}, {}, 0xfffffffe, 0x400000}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x2, 0x2}, 0x0)
shutdown(r2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x2})
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

03:46:07 executing program 3:
r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x0)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
write$vga_arbiter(r1, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe0000"], 0xfc}}, 0x0)
creat(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

03:46:07 executing program 5:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff0700000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x7f}}, './file0\x00'})
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2950.693608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
03:46:07 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e00000020000000000000000000000000000000000000000f7d2aa1ab3429148760000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa00000000000000001faacfbc000000003c000000fc01000000000000000000000000000000000000000000000000000000e13b8386e33dd5a0000000000000000000000000000000000000000000000000982909eb00fe00000000000000000000e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000000000000000000000000000e368cb50ead83cc14371e86565af18e2cad628d1c732ffb711d86ff737a114745ebe91f91405577f8b69c62085bc86c52c7fdc9d4d145824779bd2292d356803e68c42882a1f4d665e2854c07907f8e70831f3d9439a603570e03cfd5dce31c1c0f2076510debbc4bb4df13934f12b7bc3590c4ba1318c37b0236a27a28b200e4680c1d78b9cdae57bd14f44ec10adc850e1dd35a94c70f7fe5bd2007e17606416bf09a3e540b764e736d16b7da13c09a41ad0b6fa5dc4769d00000000b42bcf5656256da7641cbc0f37737ad6876c"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000deffffff0000000e00fcffff07000000000000"], 0x0)
r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000540)=[r1, r0, 0xffffffffffffffff], 0x3)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000002000000ffffac141400e000000200000000000000000000c05500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000c000800080008000000"], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2950.727405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
03:46:07 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r2, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x2)
write$vga_arbiter(r1, &(0x7f0000000500)=@unlock_all, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000004000000000000000000000000000000f0feffac641800e000000200"/55, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe0e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x28}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x77c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 2950.764559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2950.964528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'.

VM DIAGNOSIS:
03:46:07  Registers:
info registers vcpu 0
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822ddad1 RDI=ffffffff879f1140 RBP=ffffffff879f1100 RSP=ffff8880688b7228
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000065 R13=0000000000000065 R14=ffffffff879f1100 R15=dffffc0000000000
RIP=ffffffff822ddb28 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5a84ce3700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcce68f0004 CR3=0000000010660000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fc53fe307c000007fc53fe307c8
XMM02=00007fc53fe307e000007fc53fe307c0 XMM03=00007fc53fe307c800007fc53fe307c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=961d109fe5b3ce6d RCX=ffffffff8126ef7e RDX=1ffff1100bba6470
RSI=0000000000000008 RDI=ffffffff8686a6f0 RBP=ffff88805dd323d2 RSP=ffff8880186878b0
R8 =0000000000000000 R9 =ffffffff8686a6f7 R10=fffffbfff0d0d4de R11=0000000000000001
R12=ffff88805dd31a40 R13=ffff88805dd323b0 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff8126e8c0 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557cfb8400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe9fea9a3a4 CR3=0000000007e42000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe2fc4817c000007fe2fc4817c8
XMM02=00007fe2fc4817e000007fe2fc4817c0 XMM03=00007fe2fc4817c800007fe2fc4817c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000