_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r9 = io_uring_setup(0x20f1, &(0x7f0000000200))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r10}}, 0x7)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x30, r2, 0x0)
syz_io_uring_submit(r13, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r6, 0x80, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e24}, 0x0, 0x0, 0x1, {0x0, r10}}, 0xd54)

03:03:57 executing program 7:
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f00000025c0), &(0x7f0000002600)={'syz', 0x3}, &(0x7f0000002640)='<', 0x1, 0xfffffffffffffffe)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0)
request_key(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='keyring\x00', r1)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r2, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "205ecc13a22a1691e2ec3afcaec7b32d0543355855b6d78551c540ff06922aa6f78f5c8ddb9094319769f9fc0b8c1051815d47d5ca387f8bebd34fb33a28fcf2", 0x35}, 0x48, r1)
request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000300)=']&(^\x00\xc3\xe4\x02e\x9eG\x1cr\'_+\x96\xf1Ga\xdf\xd3\xfd\xfcb}\xb8vw\xa5\xd8o\x0f\x1e)\xac\xc2\x17\xc1\x1f$\xbe5\xfc\xab\aL\x06\xfbI8\x9c\xfd\xab\x01E`9\xc5\xdfX\xb6\xc3P\t*\xb6\x9a\x1f7|\xf0\\\xae\xe5\x83\xbe\x86\xeb<D/', r2)

03:03:57 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 62)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:03:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x7000000)

[ 3074.231071] FAULT_INJECTION: forcing a failure.
[ 3074.231071] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3074.233519] CPU: 0 PID: 17262 Comm: syz-executor.0 Not tainted 5.10.216 #1
03:03:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001ea0370000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3074.234632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3074.236122] Call Trace:
[ 3074.236558]  dump_stack+0x107/0x167
[ 3074.237144]  should_fail.cold+0x5/0xa
[ 3074.237754]  __alloc_pages_nodemask+0x182/0x600
[ 3074.238499]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3074.239448]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.240108]  ? lock_acquire+0x197/0x470
[ 3074.240764]  alloc_pages_vma+0xbb/0x410
[ 3074.241410]  shmem_alloc_page+0x10f/0x1e0
[ 3074.242070]  ? shmem_init_inode+0x20/0x20
[ 3074.242770]  ? percpu_counter_add_batch+0x8b/0x140
[ 3074.243555]  ? __vm_enough_memory+0x184/0x360
[ 3074.244285]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3074.245155]  ? shmem_unuse_inode+0xf60/0xf60
[ 3074.245869]  shmem_fallocate+0x78a/0xd30
[ 3074.246534]  ? shmem_evict_inode+0xa20/0xa20
[ 3074.247237]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3074.248075]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.248736]  ? lock_acquire+0x197/0x470
[ 3074.249374]  ? __x64_sys_fallocate+0xcf/0x140
[ 3074.250104]  ? lock_release+0x680/0x680
[ 3074.250741]  ? _cond_resched+0x12/0x80
[ 3074.251374]  ? selinux_file_permission+0x92/0x520
[ 3074.252160]  ? shmem_evict_inode+0xa20/0xa20
[ 3074.252869]  vfs_fallocate+0x48f/0xd00
[ 3074.253503]  __x64_sys_fallocate+0xcf/0x140
[ 3074.254196]  do_syscall_64+0x33/0x40
[ 3074.254795]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3074.255610] RIP: 0033:0x7f04eff10b19
[ 3074.256214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3074.259108] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3074.260345] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3074.261476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3074.262599] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3074.263730] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3074.264868] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:03:57 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x1, 0x9, 0xff, 0x99, "e14292da9b1f4efd900fb7434677e1f00d0c3c", 0x1ff, 0x2})

03:03:57 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71)

03:03:58 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 63)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:03:58 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x53090fff, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:03:58 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x8000000)

03:03:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001020470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3074.514907] FAULT_INJECTION: forcing a failure.
[ 3074.514907] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3074.514937] CPU: 1 PID: 17277 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3074.514953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3074.514963] Call Trace:
[ 3074.514995]  dump_stack+0x107/0x167
[ 3074.515026]  should_fail.cold+0x5/0xa
[ 3074.515054]  _copy_from_user+0x2e/0x1b0
[ 3074.515080]  __copy_msghdr_from_user+0x91/0x4b0
[ 3074.515109]  ? __ia32_sys_shutdown+0x80/0x80
[ 3074.515135]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.515155]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.515187]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3074.515212]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3074.515228]  ? find_held_lock+0x2c/0x110
[ 3074.515256]  ? __is_insn_slot_addr+0x123/0x290
[ 3074.515282]  io_recvmsg+0xae8/0xd70
[ 3074.515304]  ? lock_chain_count+0x20/0x20
[ 3074.515323]  ? io_sendmsg+0x830/0x830
[ 3074.515344]  ? __is_insn_slot_addr+0x14c/0x290
[ 3074.515367]  ? lock_chain_count+0x20/0x20
[ 3074.515397]  ? mark_lock+0xf5/0x2df0
[ 3074.515427]  ? register_lock_class+0xbb/0x17b0
[ 3074.515452]  ? arch_stack_walk+0x99/0xf0
[ 3074.515480]  ? lock_chain_count+0x20/0x20
[ 3074.515518]  ? __lock_acquire+0xbb1/0x5b00
[ 3074.515585]  ? __lock_acquire+0xbb1/0x5b00
[ 3074.515627]  io_issue_sqe+0x3bd6/0x7700
[ 3074.515669]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3074.515695]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.515743]  ? percpu_ref_put_many+0x153/0x2b0
[ 3074.515769]  ? io_connect+0x610/0x610
[ 3074.515805]  ? lock_acquire+0x197/0x470
[ 3074.515831]  ? find_held_lock+0x2c/0x110
[ 3074.515869]  ? __fget_files+0x26d/0x4c0
[ 3074.515896]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.515935]  __io_queue_sqe+0x90/0x9d0
[ 3074.515975]  ? io_issue_sqe+0x7700/0x7700
[ 3074.516033]  io_submit_sqes+0x4461/0x85c0
[ 3074.516113]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3074.516139]  __do_sys_io_uring_enter+0x6b5/0x18c0
03:03:58 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 64)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3074.516175]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.516197]  ? find_held_lock+0x2c/0x110
[ 3074.516234]  ? io_submit_sqes+0x85c0/0x85c0
03:03:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001030470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3074.516276]  ? __mutex_unlock_slowpath+0xe1/0x600
03:03:58 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72)

[ 3074.516312]  ? wait_for_completion_io+0x270/0x270
[ 3074.516344]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3074.516370]  ? vfs_write+0x354/0xa70
[ 3074.516398]  ? fput_many+0x2f/0x1a0
[ 3074.516427]  ? ksys_write+0x1a9/0x260
[ 3074.516456]  ? __ia32_sys_read+0xb0/0xb0
[ 3074.516491]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3074.516518]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3074.516550]  do_syscall_64+0x33/0x40
[ 3074.516575]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
03:03:58 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
inotify_init1(0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x40000843)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/119, 0x77}, {&(0x7f0000000700)=""/172, 0xac}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)=""/93, 0x5d}], 0x4, &(0x7f0000000280)=""/33, 0x21}, 0x0, 0x10123, 0x0, {0x1}}, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
close(r3)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
accept4(r3, &(0x7f0000000540)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001}, 0x2)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd, 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/153, 0x99}], 0x2, 0x4}, 0x9)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3074.516594] RIP: 0033:0x7fb2ae3d8b19
[ 3074.516622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3074.516638] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3074.516669] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3074.516686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3074.516703] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3074.516718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3074.516736] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3074.594844] FAULT_INJECTION: forcing a failure.
[ 3074.594844] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3074.594867] CPU: 1 PID: 17286 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3074.594879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3074.594886] Call Trace:
[ 3074.594907]  dump_stack+0x107/0x167
[ 3074.594937]  should_fail.cold+0x5/0xa
[ 3074.594974]  __alloc_pages_nodemask+0x182/0x600
[ 3074.595001]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3074.595019]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.595039]  ? lock_acquire+0x197/0x470
[ 3074.595079]  alloc_pages_vma+0xbb/0x410
[ 3074.595106]  shmem_alloc_page+0x10f/0x1e0
[ 3074.595127]  ? shmem_init_inode+0x20/0x20
[ 3074.595175]  ? percpu_counter_add_batch+0x8b/0x140
[ 3074.595201]  ? __vm_enough_memory+0x184/0x360
[ 3074.595229]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3074.595278]  ? shmem_unuse_inode+0xf60/0xf60
[ 3074.595314]  shmem_fallocate+0x78a/0xd30
[ 3074.595351]  ? shmem_evict_inode+0xa20/0xa20
[ 3074.595373]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3074.595391]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.595429]  ? lock_acquire+0x197/0x470
[ 3074.595448]  ? __x64_sys_fallocate+0xcf/0x140
[ 3074.595473]  ? lock_release+0x680/0x680
[ 3074.595491]  ? _cond_resched+0x12/0x80
[ 3074.595518]  ? selinux_file_permission+0x92/0x520
[ 3074.595548]  ? shmem_evict_inode+0xa20/0xa20
[ 3074.595569]  vfs_fallocate+0x48f/0xd00
[ 3074.595598]  __x64_sys_fallocate+0xcf/0x140
[ 3074.595619]  do_syscall_64+0x33/0x40
[ 3074.595639]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3074.595652] RIP: 0033:0x7f04eff10b19
[ 3074.595671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3074.595682] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3074.595704] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3074.595732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3074.595744] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3074.595757] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3074.595769] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3074.838808] FAULT_INJECTION: forcing a failure.
[ 3074.838808] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3074.838828] CPU: 0 PID: 17301 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3074.838837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3074.838843] Call Trace:
[ 3074.838866]  dump_stack+0x107/0x167
[ 3074.838884]  should_fail.cold+0x5/0xa
[ 3074.838907]  __alloc_pages_nodemask+0x182/0x600
[ 3074.838928]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3074.838945]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.838960]  ? lock_acquire+0x197/0x470
[ 3074.838993]  alloc_pages_vma+0xbb/0x410
[ 3074.839022]  shmem_alloc_page+0x10f/0x1e0
[ 3074.839038]  ? shmem_init_inode+0x20/0x20
[ 3074.839082]  ? percpu_counter_add_batch+0x8b/0x140
[ 3074.839103]  ? __vm_enough_memory+0x184/0x360
[ 3074.839126]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3074.839160]  ? shmem_unuse_inode+0xf60/0xf60
[ 3074.839190]  shmem_fallocate+0x78a/0xd30
[ 3074.861509]  ? shmem_evict_inode+0xa20/0xa20
[ 3074.862111]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3074.862816]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.863391]  ? lock_acquire+0x197/0x470
[ 3074.863940]  ? __x64_sys_fallocate+0xcf/0x140
[ 3074.864569]  ? lock_release+0x680/0x680
[ 3074.865116]  ? _cond_resched+0x12/0x80
[ 3074.865658]  ? selinux_file_permission+0x92/0x520
[ 3074.866327]  ? shmem_evict_inode+0xa20/0xa20
[ 3074.866936]  vfs_fallocate+0x48f/0xd00
[ 3074.867486]  __x64_sys_fallocate+0xcf/0x140
[ 3074.868084]  do_syscall_64+0x33/0x40
[ 3074.868604]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3074.869303] RIP: 0033:0x7f04eff10b19
[ 3074.869800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3074.872308] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3074.873352] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3074.874339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3074.875318] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3074.876305] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3074.877285] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3074.958861] FAULT_INJECTION: forcing a failure.
[ 3074.958861] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3074.960512] CPU: 0 PID: 17304 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3074.961421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3074.962499] Call Trace:
[ 3074.962854]  dump_stack+0x107/0x167
[ 3074.963332]  should_fail.cold+0x5/0xa
[ 3074.963844]  _copy_from_user+0x2e/0x1b0
[ 3074.964367]  __copy_msghdr_from_user+0x91/0x4b0
[ 3074.964973]  ? __ia32_sys_shutdown+0x80/0x80
[ 3074.965553]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.966082]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.966636]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3074.967228]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3074.967914]  ? find_held_lock+0x2c/0x110
[ 3074.968451]  ? __is_insn_slot_addr+0x123/0x290
[ 3074.969047]  io_recvmsg+0xae8/0xd70
[ 3074.969525]  ? lock_chain_count+0x20/0x20
[ 3074.970071]  ? io_sendmsg+0x830/0x830
[ 3074.970566]  ? __is_insn_slot_addr+0x14c/0x290
[ 3074.971154]  ? lock_chain_count+0x20/0x20
[ 3074.971694]  ? mark_lock+0xf5/0x2df0
[ 3074.972193]  ? register_lock_class+0xbb/0x17b0
[ 3074.972786]  ? arch_stack_walk+0x99/0xf0
[ 3074.973319]  ? lock_chain_count+0x20/0x20
[ 3074.973852]  ? __lock_acquire+0xbb1/0x5b00
[ 3074.974425]  ? __lock_acquire+0xbb1/0x5b00
[ 3074.974979]  io_issue_sqe+0x3bd6/0x7700
[ 3074.975505]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3074.976194]  ? SOFTIRQ_verbose+0x10/0x10
[ 3074.976726]  ? percpu_ref_put_many+0x153/0x2b0
[ 3074.977317]  ? io_connect+0x610/0x610
[ 3074.977815]  ? lock_acquire+0x197/0x470
[ 3074.978331]  ? find_held_lock+0x2c/0x110
[ 3074.978866]  ? __fget_files+0x26d/0x4c0
[ 3074.979377]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.979931]  __io_queue_sqe+0x90/0x9d0
[ 3074.980438]  ? io_issue_sqe+0x7700/0x7700
[ 3074.980984]  io_submit_sqes+0x4461/0x85c0
[ 3074.981548]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3074.982192]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3074.982817]  ? lock_downgrade+0x6d0/0x6d0
[ 3074.983344]  ? find_held_lock+0x2c/0x110
[ 3074.983875]  ? io_submit_sqes+0x85c0/0x85c0
[ 3074.984435]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3074.985061]  ? wait_for_completion_io+0x270/0x270
[ 3074.985671]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3074.986266]  ? vfs_write+0x354/0xa70
[ 3074.986744]  ? fput_many+0x2f/0x1a0
[ 3074.987212]  ? ksys_write+0x1a9/0x260
[ 3074.987705]  ? __ia32_sys_read+0xb0/0xb0
[ 3074.988257]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3074.988936]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3074.989600]  do_syscall_64+0x33/0x40
[ 3074.990080]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3074.990747] RIP: 0033:0x7fb2ae3d8b19
[ 3074.991227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3074.993579] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3074.994551] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3074.995463] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3074.996374] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3074.997281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3074.998188] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:04:14 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x1d}})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
[ 3090.560006] FAULT_INJECTION: forcing a failure.
[ 3090.560006] name failslab, interval 1, probability 0, space 0, times 0
[ 3090.561242] CPU: 0 PID: 17332 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3090.561987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3090.562871] Call Trace:
[ 3090.563158]  dump_stack+0x107/0x167
[ 3090.563557]  should_fail.cold+0x5/0xa
[ 3090.563979]  ? create_object.isra.0+0x3a/0xa20
[ 3090.564462]  should_failslab+0x5/0x20
[ 3090.564867]  kmem_cache_alloc+0x5b/0x310
[ 3090.565294]  ? mark_held_locks+0x9e/0xe0
[ 3090.565727]  create_object.isra.0+0x3a/0xa20
[ 3090.566185]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3090.566718]  kmem_cache_alloc_bulk+0x168/0x320
[ 3090.567206]  io_submit_sqes+0x6f76/0x85c0
[ 3090.567675]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3090.568217]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3090.568735]  ? lock_downgrade+0x6d0/0x6d0
[ 3090.569011] FAULT_INJECTION: forcing a failure.
[ 3090.569011] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3090.569171]  ? find_held_lock+0x2c/0x110
[ 3090.569188]  ? io_submit_sqes+0x85c0/0x85c0
[ 3090.569211]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3090.572328]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3090.572891]  ? trace_hardirqs_on+0x5b/0x180
[ 3090.573349]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3090.573925]  ? ksys_write+0x1a9/0x260
[ 3090.574332]  ? __sanitizer_cov_trace_pc+0x30/0x60
[ 3090.574835]  ? ksys_write+0x1a9/0x260
[ 3090.575240]  ? __ia32_sys_read+0xb0/0xb0
[ 3090.575673]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3090.576224]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3090.576771]  do_syscall_64+0x33/0x40
[ 3090.577161]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3090.577704] RIP: 0033:0x7fb2ae3d8b19
[ 3090.578096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3090.580029] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3090.580837] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3090.581587] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3090.582318] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3090.583072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3090.583822] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3090.584600] CPU: 1 PID: 17339 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3090.585644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3090.586868] Call Trace:
[ 3090.587283]  dump_stack+0x107/0x167
[ 3090.587828]  should_fail.cold+0x5/0xa
[ 3090.588415]  __alloc_pages_nodemask+0x182/0x600
[ 3090.589114]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3090.589972]  ? lock_downgrade+0x6d0/0x6d0
[ 3090.590593]  ? lock_acquire+0x197/0x470
[ 3090.591182]  alloc_pages_vma+0xbb/0x410
[ 3090.591784]  shmem_alloc_page+0x10f/0x1e0
[ 3090.592390]  ? shmem_init_inode+0x20/0x20
[ 3090.593244]  ? percpu_counter_add_batch+0x8b/0x140
[ 3090.594239]  ? __vm_enough_memory+0x184/0x360
[ 3090.594908]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3090.595689]  ? shmem_unuse_inode+0xf60/0xf60
[ 3090.596368]  shmem_fallocate+0x78a/0xd30
[ 3090.597118]  ? shmem_evict_inode+0xa20/0xa20
[ 3090.597955]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3090.598696]  ? SOFTIRQ_verbose+0x10/0x10
[ 3090.599321]  ? lock_acquire+0x197/0x470
[ 3090.599884]  ? __x64_sys_fallocate+0xcf/0x140
sendmmsg$sock(r1, &(0x7f0000006500)=[{{&(0x7f0000000040)=@hci={0x1f, 0x1}, 0x80, &(0x7f0000001640)=[{&(0x7f00000000c0)="6445f6582bfcb2de82ae6d22ac2a57cc186c06eac84901aae59e59b21f8ca72ce474da086d5c64d831adfe35ac70b4f35a50e1528376b2031dedce738bd2dd7d6f018bd8e1ccba80912fbc", 0x4b}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="5a01244c42dfe4127b338ffb1135f3bb1266b346999acc16cb3cd2b8871b13c1cd87488b32d45621ee86ce312ef6416d6e9825ec09383d565315710bd617b588e34d599a288afec9d5f43cc5e5cb9b903ab53866e567670c897a7d0cf123c76747e273ca8e2ed5040ae787b91288e224bb041dcf4056b26cf4de480ccb0f8c0b16bb6e8e642b7ac5fc091c1c1c08dbfe743f7246c4a2049717c7e92cdf8c771abcc31603df788e72bcfede", 0xab}, {&(0x7f00000012c0)="a820cb680f72431141220c8e2700b2ea5fd33e1f3df1c7a00e22c20a064e4955aceb715e0d24020e4d7f17dc5b83752254da42fb5404ef9f1c0daa64a692182a839c34eb201aeb274dcf068415c15dea002235746230ae3d6a40fb5fbed7d7b70a17816bc50160b9843dda1b0f3f0a6da461d29fdbcad8bf692a66e856f1cbfa8ba458b0cffca3f02378a462195f89d3ddfc658bfd347f4e003a2400f4df3d1057ae9b84176fa52ce6be7300fce091fa84af5f7ac353", 0xb6}, {&(0x7f0000001380)="fb9a123e8f98c461f1419b6e042c709a91d6f2e1302d7337b1b0492f02c88c9b446cf20be475a0d1ab86ccc5cca9e2c86e74daf50a9f089476930ef0f9a6278e483d9bb33f414ba835fa4565cc04b2bfe19d5eaed0edd19245360fad1060a7c32e93bac9df06c7221eb9577392daa11930cc1499c21274e58f17b96dc61b7d4482f2438f18453c7f85785630a9ecd3df2796b865c112f90bd4b3eb1f76a6c3ee4ed5498a06c3a8b392e17fe838b16df3cb0b9682617d6b0e8bc8b6bdbba53a0aef756178bacbeef7ceae7caae4461fedfab0589516f02524f02e171c1aae863d2c6149fdc9433459f86b635dce3a2a710a22", 0xf2}, {&(0x7f0000001480)="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", 0xfe}, {&(0x7f0000001580)="43578f6dcd940c0ca56a6c69e19750b591d33d1d76c13113d3c7197d0142067bbae68935f2de991c57769ba78e5e97c03650dedf4886c991fdfb36ec3104ace3046a4531470ab5873b4007f04ebe3bf353dac4390f4f0c1b3d651f9e5f9031d559ebf949ef1ff5f45309cd2b01494069c5faf48b85733c64956c8dbcab5644349081a6977956a679025880ab18bf3c35c03d5905a0f48fba86c3daef2ff3d1be5e640567bf83a658f76951f7fd1bb2ba4df25181", 0xb4}, {&(0x7f0000000140)="c2e15ce3f9d34563000b0150e5ead4bf0a4b1679b5a6dc50041442344926b14b50f2ef5cca6fd4f7409cba6e38579cf73c0e75ac665be92a2a5ca6418ff9ac6d6d6289c250c418fda84c497644fcc4d8cc304a2c8d3b7dce0268d6390e55", 0x5e}], 0x8}}, {{&(0x7f00000016c0)=@ethernet={0x1, @remote}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001740)="da31676c1ec23d7bf5bb0df473899405dfd624b80a5227f33da54ebce4277ef6fc623450ce295c80e9fa47e13dfdd5a98e1645dff94563c7694d44f7ae058a840a699e965b9e57229a6da6b68cf0010c0a4c0d4129114039f6c6f4eceff4727eb2264cbff61e8432dfbb7db31436cc7dcdb290ac5cf2b25ea8fbba685e7536386c8e4b376625268b8f0ac90c572d90d2dd95e4b48b0f2c0ba0a27ebb6c3d09bf91a3563878ac260811949d33f6594ba4c4d73bd31e0323547c3bcce3d64d1c5d2ffe6fa0b7072945fb259fe5b2f588f838880517506abf88d6cb8de78098efd0e909cfe8b3feaf37c5f390b8c2238639a25e4c", 0xf3}, {&(0x7f0000001840)="2629d7786ef17e5a89587f04de0409b54687e8b7fa4011430672ce9afb5a27408e0e60e3982ebcac529886", 0x2b}, {&(0x7f0000001880)="e5a2b17eddebe6c37f3d04cd2805a430a712dad28a44af8b38cc6ba33e9b22ea4966ae445fb903d6caeb2300453b7c725e741c5864a0e9619c1525f4eba36964b8c4b8cf988e872b3cced4bb057bb749bb2c0bb5368b9e811d5a671387823acbed63e3011ce4ee0e4223ae458878aa899c86c3861bc0e023f750767ff1d28937bd593a2d55e10c", 0x87}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="120cbe8e8edef010410003dcd80044cbdf9f34ae5df2580273c12bafd9373df96d8826eb75745aecb01c", 0x2a}, {&(0x7f0000002980)="4adf1d343efe4c0eb5eda57820a3deef2e8d966a2ae64d5d1dd390f921ec81d1a936ff", 0x23}], 0x6, &(0x7f0000002a40)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0x60}}, {{&(0x7f0000002ac0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002b40)="aa46278c1b428ce9fcc614579145efed996dc03810dd835307160b139be5deb0744ace65520f945c8ca6185677a97da251c3635b8331695b835a0defa224f67e1e8ceff0e0443033e9f0456103d6163071f203cfd7b394f77464", 0x5a}, {&(0x7f0000002bc0)="90d4b3350363cd742ba46f0e72457990b2e99ad772bdd2ca6837fc4b89e3c40cec5d33d6c41fb1668f2424a7545bfcadf35633f614b3e9ad5a599c83125fbb808092357104021936aa57a251b47515e63b48da18f2f4039fa97239c894340cc0586000462a14f83890c6bd092019712bb1382a8390914d3e0942deeee88767838ef2168f21124e6a39", 0x89}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="95ad0b141c71e5e3051bfef2d0251d89e93c577687bfc9a6d0f21f95886b53652d19408646f2d093bba9ff135234d56e7617110ddbecebf6b6879b168a7c10b0e41d9f985fa8923e9b5136dd193ac5b5c36b2fcf59a7246c875f5519f601bc9f8e0558f39c4c1342a296eb293fe7a949e00201ee50c54f82523814b1d7aa461c2d610e4fce63dac31e279d4e0ada794404e6aaea1c274db334dac93a205350843c6a05ce811167c0d794bac03bde12510d195587bd7627b565299f3dd807eb80b1d721aa729f9ebe", 0xc8}, {&(0x7f0000003d80)="aae58bce44737deee98fe5366ebf8c2509a83a0d6becb6accfc9e79a5d7240db7ebb1d044b966da3e1aa7369c8d5989300325ccb5eaea3d8bd69739fc517f04897e7f4a536823e62a739c1481b7c4fc642d025a8b5e7c3701eea92ca5969a7bb25a82a59a53f4bd78e666dcb1f013b93233b510fb135f8d5a3024d8f6579a22fd20d04f0b8483d755567485860d66c8d170da2d80a34a7d7ebf0b3c760a6de6e9e05ed65373a1b98230e76418af615121bcb9a35ce13f8e379d88737fa2d882f89abc06fbdca9894d9b63f1fd36115ee6b50466ac9e9bb53a18f3f4595a165639fa0f493f73437ba71ea042f108aad4b", 0xf0}], 0x5, &(0x7f0000003f00)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0x30}}, {{&(0x7f0000003f40)=@pppoe={0x18, 0x0, {0x1, @multicast, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003fc0)="a5c10d33c14ee15f63895a67a335843bae12e72dcadebf2863b7afa9d553df731ea8f28699df432e624012c54144eba5d5566fbf3e49b6f3ae0bab3535f50951baf61d037a2f9b3a5795d37a4afacbcc59a78a517c872d461572d77a9f21ca8371e134ae1c1b86dbe85346ead0687dacdf3fc70bee2fbd35c70214f8f422944bcdcc8666545192c64c2c5e7cd55e5e3d2b2bc1468c1d5eabba599852c674f709585392507aa1de15df09fc33f6296550a108abe62406be66c47ded82c89eba06bb7054db6931f481497ebb2598", 0xcd}, {&(0x7f00000040c0)="16fb2e34198aac49b3acccf5f77f5aa15d9321fd8d2a57bdfd46d2a775d78b76912a5076d14d5e86dce87bb2365c862c9df2167370a955769d30ea901c35527947e9c5f4deac6b08ad17bd3430dd56d88c334f5132985fd190238f4364958fbd8670b50cdb219db95618a53c647e1df390550746e1e8bc56926dd56f26e0db941fff699bf263bf8071c55460a053a205d9c59440fd4b5115e172e418551edce788bd77a251fd", 0xa6}, {&(0x7f0000004180)="b128df7ed19ad9783dee6be4ac9930d48d1905408c0a89f0034fc4c8fb8b530e68a8ad43182f83e5e01385b6aa08f07513c33f0eeb1d2262fd92de2809074ce0ff0b38c6", 0x44}], 0x3, &(0x7f0000004240)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffe0}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xf25c}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @mark={{0x14}}], 0x90}}, {{&(0x7f0000004300)=@l2={0x1f, 0x400, @none, 0xa847, 0x1}, 0x80, &(0x7f0000006400)=[{&(0x7f0000004380)="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", 0x1000}, {&(0x7f0000005380)="6ab129b108158e62dce60d7d0e230e88ca345bca401d15da19c2623e2ab7ac1d149bd1eb", 0x24}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f00000063c0)="4becfbaf648f12e551115d40ba2b61a1a09280e32baab9b64aadaf9143c87e4a8425a91ee816065440f3b04bde4955a97e1577b2666352cef3113250f3c4", 0x3e}], 0x4, &(0x7f0000006440)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0xa8}}], 0x5, 0x801)

03:04:14 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffc00}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x3ff}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x20004001)

03:04:14 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x91000000, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:04:14 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xa000000)

03:04:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001040470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001020470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:14 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 65)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:04:14 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73)

[ 3090.600706]  ? lock_release+0x680/0x680
[ 3090.601299]  ? _cond_resched+0x12/0x80
[ 3090.601862]  ? selinux_file_permission+0x92/0x520
[ 3090.602583]  ? shmem_evict_inode+0xa20/0xa20
[ 3090.603213]  vfs_fallocate+0x48f/0xd00
[ 3090.603800]  __x64_sys_fallocate+0xcf/0x140
[ 3090.604430]  do_syscall_64+0x33/0x40
[ 3090.604983]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3090.605706] RIP: 0033:0x7f04eff10b19
[ 3090.606254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3090.608823] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3090.609949] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3090.610949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3090.611952] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3090.612943] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3090.613941] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:04:28 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x20000000)

03:04:28 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xb1010000, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:04:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001050470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:28 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
r0 = syz_io_uring_complete(0x0)
openat(r0, &(0x7f0000000180)='./mnt\x00', 0x58d902, 0x40)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a0c0a0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000008b20b9861c7e606a6a8ca1375527a9b73415e991f370ca2a9da3a7f7a09baaad75173d3f8286f6d4241d09f53dc6ed", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])

03:04:28 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 66)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:04:28 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3e68ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0)
r0 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup2(r3, r3)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x3, 0x2})
io_uring_enter(r0, 0x76d3, 0x80, 0x1, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x8)
execveat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd<m\x82u\x0fZ\xa9\x14\xf5\xc7X\xa9\x00\xb7\xaf\xcfouN\xbd\xb2\t^\xbe&~\xa7l\xfa\x036\x1c\"\x80\xfc/\x9b\x95\xf1!K\xc5{\xe7\xfdB[\xca\x87\x9bc\x98dg\x1a\xa1\xaa\xb4\x19\x7f\xa7\x90y\x9fq\xf5\x8a\xa9 \xa6\xdd\xf0+gb\xa6g\\\xec\tz\x06\xdf\x1a\x9c\xc9\xf7\xcc\x85\xb4G\xe9\xd3D\xf4\x8c\n\x17\xd5\x00\xf18\xb3T', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], 0x0, 0x1000)
r6 = dup2(0xffffffffffffffff, r4)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000cc0)={<r8=>0x0, "5c7665bf9c7606ed98938349b23e386b"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000600)={r8, 0x9, 0x6, 0x1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)

03:04:28 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74)

03:04:28 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r6=>0x0, @local}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r6, 0x2f, 0x1f, 0x0, 0x80, 0x8, @private1, @private2, 0x10, 0x40, 0x9, 0x7}})

[ 3104.430656] FAULT_INJECTION: forcing a failure.
[ 3104.430656] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3104.432657] CPU: 1 PID: 17364 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3104.433654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3104.434824] Call Trace:
[ 3104.435213]  dump_stack+0x107/0x167
[ 3104.435744]  should_fail.cold+0x5/0xa
[ 3104.436531]  __alloc_pages_nodemask+0x182/0x600
[ 3104.437375]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3104.438441]  ? lock_downgrade+0x6d0/0x6d0
[ 3104.439184]  ? lock_acquire+0x197/0x470
[ 3104.439924]  alloc_pages_vma+0xbb/0x410
[ 3104.440668]  shmem_alloc_page+0x10f/0x1e0
[ 3104.441382]  ? shmem_init_inode+0x20/0x20
[ 3104.442034]  ? percpu_counter_add_batch+0x8b/0x140
[ 3104.442781]  ? __vm_enough_memory+0x184/0x360
[ 3104.443636]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3104.444546]  ? shmem_unuse_inode+0xf60/0xf60
[ 3104.445230]  shmem_fallocate+0x78a/0xd30
[ 3104.445865]  ? shmem_evict_inode+0xa20/0xa20
[ 3104.446536]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3104.447326]  ? SOFTIRQ_verbose+0x10/0x10
[ 3104.447962]  ? lock_acquire+0x197/0x470
[ 3104.448577]  ? __x64_sys_fallocate+0xcf/0x140
[ 3104.449265]  ? lock_release+0x680/0x680
[ 3104.449871]  ? _cond_resched+0x12/0x80
[ 3104.450471]  ? selinux_file_permission+0x92/0x520
[ 3104.451209]  ? shmem_evict_inode+0xa20/0xa20
[ 3104.451878]  vfs_fallocate+0x48f/0xd00
[ 3104.452492]  __x64_sys_fallocate+0xcf/0x140
[ 3104.453148]  do_syscall_64+0x33/0x40
[ 3104.453719]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3104.454497] RIP: 0033:0x7f04eff10b19
[ 3104.455066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3104.457797] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3104.458935] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3104.459994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3104.461065] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3104.462122] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3104.463175] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:04:28 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'})
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x174, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x978f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x399}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x44)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f00000004c0)=0x28)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x27}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x7, 0x801, 0x0, 0x0, {0xc}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3094}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004080}, 0x40010)

[ 3104.560887] FAULT_INJECTION: forcing a failure.
[ 3104.560887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3104.563087] CPU: 0 PID: 17372 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3104.563770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3104.564586] Call Trace:
[ 3104.564861]  dump_stack+0x107/0x167
[ 3104.565230]  should_fail.cold+0x5/0xa
[ 3104.565620]  _copy_from_user+0x2e/0x1b0
[ 3104.566025]  __copy_msghdr_from_user+0x91/0x4b0
[ 3104.566497]  ? __ia32_sys_shutdown+0x80/0x80
[ 3104.566963]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3104.567411]  ? find_held_lock+0x2c/0x110
[ 3104.567818]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3104.568358]  ? lock_chain_count+0x20/0x20
[ 3104.568779]  ? __is_insn_slot_addr+0x123/0x290
[ 3104.569237]  ? lock_downgrade+0x6d0/0x6d0
[ 3104.569658]  io_recvmsg+0xae8/0xd70
[ 3104.570024]  ? lock_chain_count+0x20/0x20
[ 3104.570444]  ? io_sendmsg+0x830/0x830
[ 3104.570835]  ? mark_lock+0xf5/0x2df0
[ 3104.571214]  ? lock_chain_count+0x20/0x20
[ 3104.571634]  ? __lock_acquire+0xbb1/0x5b00
[ 3104.572089]  ? __lock_acquire+0xbb1/0x5b00
[ 3104.572519]  io_issue_sqe+0x3bd6/0x7700
[ 3104.572917]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3104.573425]  ? SOFTIRQ_verbose+0x10/0x10
[ 3104.573835]  ? percpu_ref_put_many+0x153/0x2b0
[ 3104.574285]  ? io_connect+0x610/0x610
[ 3104.574668]  ? lock_acquire+0x197/0x470
[ 3104.575064]  ? find_held_lock+0x2c/0x110
[ 3104.575479]  ? __fget_files+0x26d/0x4c0
[ 3104.575873]  ? lock_downgrade+0x6d0/0x6d0
[ 3104.576294]  __io_queue_sqe+0x90/0x9d0
[ 3104.576687]  ? io_issue_sqe+0x7700/0x7700
[ 3104.577114]  io_submit_sqes+0x4461/0x85c0
[ 3104.577565]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3104.578052]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3104.578531]  ? lock_downgrade+0x6d0/0x6d0
[ 3104.578939]  ? find_held_lock+0x2c/0x110
[ 3104.579346]  ? io_submit_sqes+0x85c0/0x85c0
[ 3104.579777]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3104.580256]  ? wait_for_completion_io+0x270/0x270
[ 3104.580731]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3104.581190]  ? vfs_write+0x354/0xa70
[ 3104.581564]  ? fput_many+0x2f/0x1a0
[ 3104.581924]  ? ksys_write+0x1a9/0x260
[ 3104.582295]  ? __ia32_sys_read+0xb0/0xb0
[ 3104.582692]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3104.583195]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3104.583701]  do_syscall_64+0x33/0x40
[ 3104.584069]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
03:04:28 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x3f000000)

[ 3104.584559] RIP: 0033:0x7fb2ae3d8b19
[ 3104.585062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3104.586778] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3104.587495] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3104.588168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3104.588826] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3104.589484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3104.590143] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:04:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001060470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:28 executing program 7:
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
r0 = clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = getpgrp(0x0)
kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0xe1, 0x1f, 0x6, 0x20, 0x0, 0xb3, 0x1000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_config_ext={0xc46d, 0x800}, 0x10002, 0x4, 0x1, 0x4, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffff}, r1, 0x3, 0xffffffffffffffff, 0x0)
r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2)
r4 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000780)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef6904b8114417300486c7dc67510f255163554a8b1cfd24cab6fc6fe129421a032a00", 0x17}, 0x48, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r4})
add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00')
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0)
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "2f97f1386555bf720d844cc7859d7611f2a64fbfe74f86107a8cd37236247bd6d74681f23a60a06de93eef4365505415c1fb36896b65a41233efda5dc7bfe6e4", 0x34}, 0x48, r3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup2(0xffffffffffffffff, r5)
keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:04:44 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
dup3(r2, r1, 0x0)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x120, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="b139c3e4ee22"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'uname'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3f}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x48e0}, 0x80)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/bus/scsi', 0x40, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2410d0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.'}}, {@access_user}, {@debug={'debug', 0x3d, 0xfff}}, {@noextend}], [{@euid_eq={'euid', 0x3d, 0xee00}}]}})
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000440))
fsmount(r4, 0x0, 0x70)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

03:04:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140)={0x0, 0x1000, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:04:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x40000000)

03:04:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001070470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:44 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 67)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:04:44 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00')
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1)
r3 = gettid()
rt_sigqueueinfo(r3, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x100})
sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="70030000150000042abd7000fddbdf251b0000000c00378008004a00", @ANYRES32=r3, @ANYBLOB="81b7a71e652957ed2302955f466e5c6d557e22ea675c4434c5b62afed5124f37cf4c6458799a154f2990a48f27bcd91ca6911a58ae727bc9767d678edf9cc3c6a768d2dfe2ebc032dafc2489993c72e2a567269c1f4a0724f86a28665f09c782e1782235bd7aeb7a90775760792902dcb363e4ea2eea1648c981800753d54fb4c1a4e77c2c7ee0482e48b25d8eb31039a58efc61d2825c79a4e141e551965ddd03f2a082962ad9214e32dadf7af02d9bdf9b8aad479419fa35e08e49b54e4b2ca029d0d67709368d603ee62823a68c9737f8f999c8da77ba0cc9f2ed634580e4c9433879e72844f25dee13d5096f1cf9c82397f7d9ebc8f6feab14b16e4ca875b66234ab8e36cbb77eb12b1360df91d3b0f10162891ead5760419f095f64d69fd9a8631213fc00f709d39772576614fc4048d5fd5fa441de8514f52393f6bcda6a58350689cd039e9922d9ad44783643b76f0163a3dd037ce70c23e21a26e48315c9a4b06d9958b4a4eb1f9cc31252056d6de201622fcd7e040f636fe8bc1efcac4608c6a72f346dc7c779d7249e8a0af05b64149c433408548462108cff2bf900168046df4d7ae012e10e25c42b1b28b6e8e96dde54a3091403f8a0a2748eec464f0527ab881eafc5d60afbcab1ec195af0049e98aa2707f34ecc55b4e761ee5e2f33ff3d2d08529359dd43bdc2d6d3f9256cc4fd2d3fcec810964be677fd9da00c1f5c6702394eb1aa29d860ff4af94aa54dd36c0429a6de8ecd95ca799182b9c93282f796f8f8b4b90ccedae821d49293f3d15187e1eab1c44f1ee645fad7f504607fe8ede36990a983f12bf58a8eaa2efc2055a8e1c7ef86a57363c3566991379849ceea710dd87523c45689b63a576c1077aa7f0883312af3d45ca5c0e97f1579d677aa1fc2d23d2496c24d638a080095000a010101000000060039007b0000005865853d551e056a4bcdd80c3fb951de8479a8f549dda108f4eca3d707fff7f31fbd595964fd52007f01006b2d8480982f0d3a067ebfcb6222d381d457e273e18bb72337b2046fd8c0f77144c258c9fdf125959cc648c94035ef33de0b70dc11e9100183a5d790f3e41c0b64fec26eb90587a1946c7fe5fe49164c3ace71dfdcfdff2bc8fcf6dd02afec9a741ed8c49c8c461d9159ab4541acd6354b218ef8c7743a0800860007000000000000"], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80800)
r6 = dup2(r1, r5)
r7 = accept4$unix(r6, 0x0, &(0x7f0000000880), 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'})
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000900)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xc, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "085cb6bf9426cd5334ecfbacb3604051039d2cd5be444df18e0809cbc89894ff", "0fd8e916cdc58e4fbc63d0ea8db99ab3", {"982a56ae5bd9d791a48fbb8e1a5c1e6f", "bd9341e9019a4815f8e35305a14412f3"}}}}}}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={<r8=>0x0}, &(0x7f00000006c0)=0xc)
get_robust_list(r8, &(0x7f00000007c0)=&(0x7f0000000780)={&(0x7f0000000740)}, &(0x7f0000000800)=0x18)
recvmmsg(r4, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0)

03:04:44 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xe4ffffff, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:04:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75)

[ 3120.501142] FAULT_INJECTION: forcing a failure.
[ 3120.501142] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3120.503724] CPU: 0 PID: 17426 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3120.505020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3120.506388] Call Trace:
[ 3120.506851]  dump_stack+0x107/0x167
[ 3120.507460]  should_fail.cold+0x5/0xa
[ 3120.508096]  __alloc_pages_nodemask+0x182/0x600
[ 3120.508889]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3120.509877]  ? lock_downgrade+0x6d0/0x6d0
[ 3120.510564]  ? lock_acquire+0x197/0x470
[ 3120.511238]  alloc_pages_vma+0xbb/0x410
[ 3120.511919]  shmem_alloc_page+0x10f/0x1e0
[ 3120.512617]  ? shmem_init_inode+0x20/0x20
[ 3120.513328]  ? percpu_counter_add_batch+0x8b/0x140
[ 3120.514152]  ? __vm_enough_memory+0x184/0x360
[ 3120.514910]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3120.515819]  ? shmem_unuse_inode+0xf60/0xf60
[ 3120.516567]  shmem_fallocate+0x78a/0xd30
[ 3120.517255]  ? shmem_evict_inode+0xa20/0xa20
[ 3120.517981]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3120.518875]  ? SOFTIRQ_verbose+0x10/0x10
[ 3120.519570]  ? lock_acquire+0x197/0x470
[ 3120.520228]  ? __x64_sys_fallocate+0xcf/0x140
[ 3120.521000]  ? lock_release+0x680/0x680
[ 3120.521666]  ? _cond_resched+0x12/0x80
[ 3120.522310]  ? selinux_file_permission+0x92/0x520
[ 3120.523118]  ? shmem_evict_inode+0xa20/0xa20
[ 3120.523865]  vfs_fallocate+0x48f/0xd00
[ 3120.524541]  __x64_sys_fallocate+0xcf/0x140
[ 3120.525226]  do_syscall_64+0x33/0x40
[ 3120.525855]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3120.526670] RIP: 0033:0x7f04eff10b19
[ 3120.527298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3120.530219] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3120.531487] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3120.532616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3120.533763] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3120.534890] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3120.536034] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:04:44 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, @perf_config_ext={0x0, 0x425988bf}, 0x0, 0x4d1, 0x0, 0x5, 0x200, 0x40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r0=>0x0})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000400)="071e9f7358ec922343d9806f7c2147c81e6890a8016fb53a5ffc493750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e70800"/97, 0x574f9a1587427bae)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
readv(r3, &(0x7f0000001600), 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r0, 0x2, 0xffffffffffffffff, 0x2, 0x80000})
syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0/file0/file0\x00', 0x200000080000, 0x0, 0x0, 0x2009020, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000300)={0x0, 0x3, r4, 0x9})
mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
unshare(0x48020200)

03:04:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(r4, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0x107)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x7, &(0x7f0000000a40)=[{&(0x7f0000000300)="8e02c7d1c9c8c0749f024509ae6125746f9b3cd17403172b1878a532aeb87793fc8a8bd889be12bae7571e7aae541777af33570d13b2ebb37280e92156a76404dd4e5b64d39d0e6beb6f56f11b650879b1ca0837c2dbee0962c4cab170650ddb6c2d0ab8fae71e604b7312d5caeeece9b5669e4f72f888af0801bf7e216f45824704f6bc6cab98bc6281a1b0322bbc1a41a337c8f7bbc55ae4252250855c2eccbbeb8a92f25a406a456855bae6066856aebe033e", 0xb4, 0x5}, {&(0x7f0000000500)="d002cccc039ee24f12855dd0fac7d2b365872ba413408e28d840d6f482a60b741e6809e4f1674f834ad31a12d6ef8510204fdab80b54fe547f19eaabbd04a7b77c0be69c4ec3a8c8ae8a81b8c6c7e66d9999fd28c639627f3f6b89d661d86630be3bc9f6d9bbeb50fc91df232daebafa006254cbd94d289142104ddefd2137df5ae2f38f8638bda5bd14acea0d1e69b434297537e2b7c09c1ee4e0e4fb81314742ed336f3bcaf1a1b45f", 0xaa, 0x3}, {&(0x7f00000005c0)="c4cfcd218aa179b58fb71edb63034b923c40415a80986cb9d8e4cdcf808048cff78acaf4a418bba068cd622de7ac232c0eb15bbec7d68a16d129f391e5f02699e75f1bad79e20d3e76f31c241a2a2d110560f09bbfad1afd61e1aa410319f6f10ae0f22047aec489809b34d18b5525172f06ba49e7d0d720f58cc4948c9db9df92d28ac7657b3d7f9e58b57192f406cf5926f037aae8ab8b9763c4a73a5fd08a8c5e4e2ef6c9e9c3194e13704d997ea12adf8dd9ec4a0859b39797ce1dcd213217453e0c3308cff4fb7c15e19c4521408625da21664e90746ca73a8c75e6a7dc67847dbf648d43b075d792b576beac14", 0xf0}, {&(0x7f00000006c0)="65e7a55484fec73af5a312a7ded706c315b776014e303396f2a83b62c9ac157a0274a2710532827df9e754b7f08ed7a6806bc398405069a29e765c8ea842ff7d8f3d77394e9c3e9d3e92172a0d89cf0d4cf2c0335555afa296fef43a87db849b0726945468982d00f700f249a5025efc8df5e990b343c297176050623a253d6b3034195896532d055842ec21fcec1f98ce", 0x91, 0x3}, {&(0x7f0000000780)="3e3cc09f45b3ef0e2fdadec2fbd9e8afedd5c17d9ff6ad2630abbb234324e52fd2575861ed1046db6e21e949da4300fe06cdcef3cd671523482fa81a3dd992eb893cfc37a55cb652a30e0d520566ad65711b3f312f1fbbcda95f18643e342d63b3c303d341682c3ccd312e9d599ce4584611719a632864befdeebd072dea2f8675bf9aec63ca270254f5daa4af092b33f8477414b0f23d588a5052a0923d12dc60ec76daf0ad3394ba2c55d1b7aa049ecb13ad3e4668de1e626f2273ba7fe4818b710153f5fe2a846d222878c1b9999f6665cb16c529553a2bbe4470b76ce3bf3d38414dc93e6e17d471c3b91033", 0xee, 0x20}, {&(0x7f0000000880)="ddd4fe97463f43765a140a9dabe8d276356af8cf4ccc99e048d59e576e1927c02d8423f703dd2506fab54dc65d3d4c10aa881256fd265c1ad63ab34a79a99cd4d05c0a55bad52f69172e0d8817db9e3f3618d5f43ca7db92727d5cc6c39c209935f1fbc37ee5f96d7cbe980b77db17cb46640c23bf9f9e04b7ef121231ca0b52f0551b449febf21b8682269e4a87ad30bd7295868b24fa0b619dbbfda61f6b991bfdd00bbc41f42b6cba1e22967bfe82b2c5328ade1579e5ee43e56a353e7df1e30a91be0b47765718e7a03c7323c6fa440607c4a67182bada259e19e02afbc1", 0xe0, 0xc6df00}, {&(0x7f0000000980)="c3dba457aecd2f4aa239e9dda691f032dba1e4ef82980a03097ad62a09ea31d38607d0701b4b37e5e37ee1b4ec2c35ab34b8e0c3282a2b25a27c3b7746cad8df499ec3c7541978609b0a25fefba8966c5f9b499da072a30941e9f432368a16849ee60705047662eb0d0235c2591a2e8403fa360d11d4bc9df755cad1ae3efb0c778b2ec910cfbebf58cea95a528015ab6d893dfcf2", 0x95, 0x100000001}], 0x2010020, &(0x7f0000000c00)={[{@huge_always}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', r4}}, {@euid_gt={'euid>', r8}}, {@obj_role}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]})
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:04:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001080470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3120.633242] FAULT_INJECTION: forcing a failure.
[ 3120.633242] name failslab, interval 1, probability 0, space 0, times 0
[ 3120.635569] CPU: 0 PID: 17430 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3120.636677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3120.638000] Call Trace:
[ 3120.638429]  dump_stack+0x107/0x167
[ 3120.639028]  should_fail.cold+0x5/0xa
[ 3120.639653]  should_failslab+0x5/0x20
[ 3120.640277]  kmem_cache_alloc_bulk+0x4b/0x320
[ 3120.641019]  io_submit_sqes+0x6f76/0x85c0
[ 3120.641721]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3120.642528]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3120.643292]  ? lock_downgrade+0x6d0/0x6d0
[ 3120.643952]  ? find_held_lock+0x2c/0x110
[ 3120.644621]  ? io_submit_sqes+0x85c0/0x85c0
[ 3120.645331]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3120.646122]  ? wait_for_completion_io+0x270/0x270
[ 3120.646895]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3120.647644]  ? vfs_write+0x354/0xa70
[ 3120.648238]  ? fput_many+0x2f/0x1a0
[ 3120.648847]  ? ksys_write+0x1a9/0x260
[ 3120.649463]  ? __ia32_sys_read+0xb0/0xb0
[ 3120.650125]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3120.650979]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3120.651813]  do_syscall_64+0x33/0x40
[ 3120.652417]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3120.653238] RIP: 0033:0x7fb2ae3d8b19
[ 3120.653844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3120.656798] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3120.658026] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3120.659176] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3120.660331] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3120.661494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3120.662628] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:04:44 executing program 7:
setgroups(0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000001c0)={0x0, 0x0, 0xd0d})
fstat(r0, &(0x7f00000015c0))
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r4 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010005000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040002000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="ea000011", @ANYRES32=0x0, @ANYBLOB="10000400000000002000060000000000"], 0x64, 0x0)

03:04:44 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 68)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:04:44 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x6, 0x8, 0x18, 0x0, 0x9, 0x90404f6e813612b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x56114, 0x800, 0x400003, 0x0, 0x100000000, 0x8000, 0x5, 0x0, 0x8000, 0x0, 0xe6}, 0x0, 0x6, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0)
getdents64(r2, &(0x7f0000000500)=""/192, 0xc0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x8090)
accept$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000001c0)=0x1c)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x7, 0xe9, 0x20, 0x0, 0x1000000000, 0x18300, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x8, 0x9}, 0x10800, 0x5, 0x5, 0x3, 0x3, 0xd4, 0xbe6, 0x0, 0x1ff, 0x0, 0x100}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1101)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'})

[ 3120.808671] FAULT_INJECTION: forcing a failure.
[ 3120.808671] name failslab, interval 1, probability 0, space 0, times 0
[ 3120.810435] CPU: 0 PID: 17460 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3120.811524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3120.812829] Call Trace:
[ 3120.813251]  dump_stack+0x107/0x167
[ 3120.813823]  should_fail.cold+0x5/0xa
[ 3120.814430]  ? xas_alloc+0x336/0x440
[ 3120.815015]  should_failslab+0x5/0x20
[ 3120.815617]  kmem_cache_alloc+0x5b/0x310
[ 3120.816265]  ? trace_hardirqs_on+0x5b/0x180
[ 3120.816951]  xas_alloc+0x336/0x440
[ 3120.817535]  xas_create+0x60f/0x10d0
[ 3120.818141]  xas_create_range+0x189/0x620
[ 3120.818817]  shmem_add_to_page_cache+0x760/0x1130
[ 3120.819585]  ? shmem_getattr+0x180/0x180
[ 3120.820258]  shmem_getpage_gfp.constprop.0+0x64a/0x1920
[ 3120.821110]  ? shmem_unuse_inode+0xf60/0xf60
[ 3120.821813]  shmem_fallocate+0x78a/0xd30
[ 3120.822467]  ? shmem_evict_inode+0xa20/0xa20
[ 3120.823159]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3120.823973]  ? SOFTIRQ_verbose+0x10/0x10
[ 3120.824655]  ? lock_acquire+0x197/0x470
[ 3120.825280]  ? __x64_sys_fallocate+0xcf/0x140
[ 3120.825984]  ? lock_release+0x680/0x680
[ 3120.826609]  ? _cond_resched+0x12/0x80
[ 3120.827222]  ? selinux_file_permission+0x92/0x520
[ 3120.827981]  ? shmem_evict_inode+0xa20/0xa20
[ 3120.828684]  vfs_fallocate+0x48f/0xd00
[ 3120.829314]  __x64_sys_fallocate+0xcf/0x140
[ 3120.829992]  do_syscall_64+0x33/0x40
[ 3120.830578]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3120.831399] RIP: 0033:0x7f04eff10b19
[ 3120.831982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3120.834845] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3120.836046] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3120.837156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3120.838266] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3120.839383] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3120.840508] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:04:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x41010000)

03:04:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001090470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76)

03:04:44 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xff0f0053, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

[ 3121.054176] FAULT_INJECTION: forcing a failure.
[ 3121.054176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3121.056233] CPU: 0 PID: 17476 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3121.057400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3121.058800] Call Trace:
[ 3121.059248]  dump_stack+0x107/0x167
[ 3121.059876]  should_fail.cold+0x5/0xa
[ 3121.060542]  _copy_from_user+0x2e/0x1b0
[ 3121.061228]  __copy_msghdr_from_user+0x91/0x4b0
[ 3121.062008]  ? __ia32_sys_shutdown+0x80/0x80
[ 3121.062769]  ? SOFTIRQ_verbose+0x10/0x10
[ 3121.063447]  ? lock_downgrade+0x6d0/0x6d0
[ 3121.064158]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3121.064926]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3121.065770]  ? find_held_lock+0x2c/0x110
[ 3121.066464]  ? __is_insn_slot_addr+0x123/0x290
[ 3121.067193]  io_recvmsg+0xae8/0xd70
[ 3121.067807]  ? lock_chain_count+0x20/0x20
[ 3121.068465]  ? io_sendmsg+0x830/0x830
[ 3121.069105]  ? __is_insn_slot_addr+0x14c/0x290
[ 3121.069886]  ? lock_chain_count+0x20/0x20
[ 3121.070593]  ? mark_lock+0xf5/0x2df0
[ 3121.071219]  ? register_lock_class+0xbb/0x17b0
[ 3121.071996]  ? arch_stack_walk+0x99/0xf0
[ 3121.072695]  ? lock_chain_count+0x20/0x20
[ 3121.073412]  ? __lock_acquire+0xbb1/0x5b00
[ 3121.074163]  ? __lock_acquire+0xbb1/0x5b00
[ 3121.074894]  io_issue_sqe+0x3bd6/0x7700
[ 3121.075580]  ? lock_chain_count+0x20/0x20
[ 3121.076238]  ? percpu_ref_put_many+0x153/0x2b0
[ 3121.077014]  ? io_connect+0x610/0x610
[ 3121.077632]  ? lock_acquire+0x197/0x470
[ 3121.078304]  ? find_held_lock+0x2c/0x110
[ 3121.078968]  __io_queue_sqe+0x90/0x9d0
[ 3121.079632]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3121.080486]  ? trace_hardirqs_on+0x5b/0x180
[ 3121.081213]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3121.082063]  ? io_issue_sqe+0x7700/0x7700
[ 3121.082778]  ? io_submit_sqes+0x2d3d/0x85c0
[ 3121.083471]  io_submit_sqes+0x4461/0x85c0
[ 3121.084201]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3121.084997]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3121.085816]  ? lock_downgrade+0x6d0/0x6d0
[ 3121.086478]  ? find_held_lock+0x2c/0x110
[ 3121.087170]  ? io_submit_sqes+0x85c0/0x85c0
[ 3121.087868]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3121.088689]  ? wait_for_completion_io+0x270/0x270
[ 3121.089462]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3121.090236]  ? vfs_write+0x354/0xa70
[ 3121.090831]  ? fput_many+0x2f/0x1a0
[ 3121.091452]  ? ksys_write+0x1a9/0x260
[ 3121.092073]  ? __ia32_sys_read+0xb0/0xb0
[ 3121.092774]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3121.093627]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3121.094485]  do_syscall_64+0x33/0x40
[ 3121.095076]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3121.095946] RIP: 0033:0x7fb2ae3d8b19
[ 3121.096555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3121.099659] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3121.100882] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3121.102093] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3121.103287] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3121.104502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3121.105709] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3136.147044] FAULT_INJECTION: forcing a failure.
[ 3136.147044] name failslab, interval 1, probability 0, space 0, times 0
[ 3136.148269] CPU: 0 PID: 17508 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3136.149041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3136.149951] Call Trace:
[ 3136.150250]  dump_stack+0x107/0x167
[ 3136.150656]  should_fail.cold+0x5/0xa
[ 3136.151081]  ? create_object.isra.0+0x3a/0xa20
[ 3136.151582]  should_failslab+0x5/0x20
[ 3136.152007]  kmem_cache_alloc+0x5b/0x310
[ 3136.152701]  create_object.isra.0+0x3a/0xa20
[ 3136.152758]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
03:04:59 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 69)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:04:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010a0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:04:59 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="92"]}]}, 0x1c}}, 0x0)
readv(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x79e}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1ac, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x769ab6c4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x69}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5e7c03e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5d27}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8040}, 0x20000004)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000)
syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0)
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)

03:04:59 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xff0f0953, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:04:59 executing program 7:
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
sched_getattr(0xffffffffffffffff, &(0x7f000000bb40)={0x38}, 0x38, 0x0)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x40, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"})
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000080)={0x1, 0x8, 0x9})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = dup(r4)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @loopback}, 0xe})
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x7, 0x7, "3b6589ea086f7dd493ad034825fe29c3b869ba", 0x8, 0xc0})
openat(r5, &(0x7f00000003c0)='./file0/file0\x00', 0x100, 0x1d1)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8000, 0x8, 0x1f, 0xa6, 0x89, "fd0ac8760c2123c0200feeb5463a043c13b934", 0xc823, 0x1000})
sendfile(r1, r0, 0x0, 0x4000007ffffffc)

03:04:59 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x48000000)

03:04:59 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77)

03:04:59 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/rcupdate', 0x84000, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', <r1=>0x0, 0x20, 0x40, 0x1ff, 0x8, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @generic={0x7, 0x12, "24fbcc59910b3b0b5a9e53461cb4413b"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x9, [{@broadcast, 0x1000}]}, @generic={0x94, 0x8, "afbec39ea427"}, @timestamp_addr={0x44, 0xc, 0x16, 0x1, 0x8, [{@rand_addr=0x64010101, 0xeb2}]}, @ssrr={0x89, 0xf, 0xa8, [@multicast1, @local, @broadcast]}]}}}}})
r2 = pidfd_getfd(r0, r0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r4, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000300)={@mcast2, 0x6a, r1})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000001dc0)={'syztnl0\x00', r6, 0x29, 0x69, 0x5, 0x6, 0x20, @loopback, @mcast1, 0x8000, 0x1, 0x1f, 0xb33d}})
[ 3136.152776]  kmem_cache_alloc+0x159/0x310
[ 3136.152788]  ? trace_hardirqs_on+0x5b/0x180
[ 3136.152806]  xas_alloc+0x336/0x440
[ 3136.152822]  xas_create+0x60f/0x10d0
[ 3136.152849]  xas_create_range+0x189/0x620
sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x3, @private2, 0x40}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000240)="41c3b38a6227c7eeff865e9b51efbaf549363cb64269f24581a130dd166237c113bd9fa698ea1a190a339de5b458634a8ab754ce617c0ed6244c6a82a07c0729a2ec69f6b123869f3ea084a17d92d13e41177b8ecd062f63a68d3bd2b20839e300f56405462acf44c168fbe4ba8348d06991b90ed84cb78b5de078c97c027e5f0f7004050c0a777832ac6c368ff37e88b7f307c85d82dbede20aa076745f03f81deb554644c9", 0xa6}], 0x1, &(0x7f0000000400)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8001}}, @hopopts_2292={{0x270, 0x29, 0x36, {0x6, 0x4a, '\x00', [@generic={0x80, 0xff, "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"}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @loopback}, @jumbo, @generic={0xf5, 0xfb, "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"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x6b, [0x0, 0x3, 0x9, 0x4, 0x5]}}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdrdstopts={{0x128, 0x29, 0x37, {0x48, 0x21, '\x00', [@generic={0x4, 0xea, "d9c0445267bbfdf6f0fa559bfef2df0f40cd560e50af10b80a41e8719e308e225d460df47f0d554ffa7463171860395434f2f8b625397da1cf8617c266f5bbf4ba3d20884d1055e86b832bce772a5897c71420d99a1b3bc5b7d4f1810005af22aa33ccedaff73875cdb1c084e9766d4a477284d202720bffdb8d85d6ad061372404879d59e964d1b3885ec3a91610d716762403d311682b4875f1f87ce38789b3ebc26455fd999743ee23c35834d33c81501880a5180ec6453e430762d4d33bbdada7a62806826a46673f5e1aa6da96ade21c8b9902c3efcdeafa3d6b64d3ab69022eabd56f2c8ef5715"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim, @enc_lim={0x4, 0x1, 0xd4}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x200}, @enc_lim={0x4, 0x1, 0xbd}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x20}}, @hopopts={{0xe8, 0x29, 0x36, {0x87, 0x19, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @generic={0xe7, 0xc1, "b98225946447a400cff6e02613848e8d4c50483de447cabb499e904c94c8f34935352700b50067e682f86d24865dc81d14d497b25d193134cb5e405c80b027cd5b8302b014eb483d9649e8b316c8c1040dcb6fc7a4661bd94c36de46a9cbe1889d963a1a0560c7b702b8fb8b5efa72ffb719a28f9a200eec21cd0c061dcfa84bb710c2085716be0bf0f9c9bf559ca4127ee0f9befe95498b2e7562877b347f3671ae013c48c1f0869363043c06cf69f823fbe8d1fa3540e6c76f37544de12d914d"}, @pad1]}}}], 0x508}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb28}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000980)="79eeb8b5a48a79cf39aea7166833b81a5992043188f8ff8f8693f6c5239bf82524711c49ce60381bc27e2f4295b58575e5427183272b0fcd267152ee353defddb6ce218b009c064c498ab9ed9fd1341ae0c441353c91491c353e670a058673c84080777841bfdd4eb1d0aa9c30739b62ea691f3b354c6f2130b798481bd0316582992158f9d484ef9b923765b36c0e64729c27dbd7db5317c723b247f03819a83ebccb41b80f7d043e929c5a0c3bf93875a25d3190c3fb3bca54773297558d00d170d591050313f8d4966c0522ac40634ab92953c6d0941abebb56c817aaca20499674fc0c0ccf11edc12010cd837512cd2b20a70b498f2a5f63b1d78e6376293971c0485894c32721befb40715b86006ce3cdda7e5d1aa60e358c57ba3ee906540f22271c454ef15876ea0b9030d392b5ac52cc1ff3c4e74f5cccd4f60b05fae0d7b80c3b6ed77a916748da819999c6dd72505141831b70363ab32c1354ce381245f1a34bf7d57df788c5b9608d7cb488387395fc7c341e2c7e92641e560700aa8e69ef31167382a6bf45e499630d16ad4d556af78a2118b88edc6d9ada6dc365da83aad44400d9758f41c71b88eb77c270f197a0f86bfeb5665ff8dd0eec0e23bedff47b787612048c5885fd071c3166ec4a21c8e349bcc4b61e0a9b5dc645c311712b0cc25bf21531ba0ee1ba396441578295ca1913ece0960dd720908ccc288b3711a0d408e5c6047530b7882275be82fdeebdbb1b3e5ba1f46cee7398cfc25d6a603d829a2175782eb052a20fe43b95f6e99653999cd2850738fd54c9359d5b2f910bca66c34543bab91cd211bcdf4eb6eb4ffa69f10f5ee3c1b6135c12b59628f5dbbb53541ede511b5fcc6e27cb1777799b4a875c10ed4de85459b3a026a58141f53597f69d5cc0271aa4cbec431b12911b41e49af4f8ae7b228841c4e5ced85507fed76ba3717c7b3ecef54d87a60fc03b1d613517dc99464e8f512bf839e832577e461dcf6002906b7971d67743f91541ea9aa7c99cd474552f6d9fca874544f64cd3e54ffb1bd276a9c139e2ebed48075fda2316c878ab47fb6378210d993aa4471e517f7cf019131ac8026e86bdc7d49c10d33a3e360d864588f3e5941402f2d1b3f0d5c8a617182ed6e289ebb03030d29d59dccc40455a1dc3597aaf9102f66565875ef395d5bb72669660bd023adb9bf4c627f71a491d93fb4a2da0960e8013218baf0a9e551d3d14c8f68270a652f6616289ab350c5a48d2c337ed3e93bfea3cdfd2fbf8dd1927eb684d7972a135b91ce7536a30b732209eacc4fc274dfff2bb75013cd32f14bb4f1f3735201ad9226e0da6579d90d00d070892794a5bb7119a58bddc96fad4ca43d9646ccee5af8b9c729b61c421e6737a1b65e1322b2bb46d41660f816ed863461aec20f23dcf18658b732b68b5ade36d27146595c18d07384fb257909433327325e812a439331046d3b7df74ce28ff28ecc04e7a38404aaf145f93c43415a377efe030b6dce53b8e78a6f4d24174df7499f4fa17bcf38cc5b28a97da2200948205b0fc455b1c0952451e6bcbb665473f8f2297cea30fe380bbca9d27d2d13f08b9cc2a8e54c99c517d2ca4778cc8b50cd72560e2ae29ec18d6dab85b88af6a2d0e582dd7d5e759860f64da33f632e25d89c37d0b7d6b9c7d622a0e234d8944dc7efb7ae7774768e3cbd4e5fe8a4370ce04b55f2afcd52d768decf772fc5c3e34d21f09f3e6a63e6dab460bc5eb54876b697fe6aec31b468239ce5c89dfc6b25fbd3677724d6c0f4e6139158aa4f619282be9c575f93ba68409fdf0a6a784a231f5ce2325d0dfef3c4f2c4c9ede23845e6c5fd145fbb7792d1533ba6fe04899d69f30ba63bc23dbf279b134071a63824242772674ac29b820dd74c1c649eb36185684e1421e1bceafdc7b0342221e630ca3134a37eaa33a5bd2c20e85ded02e49ad16df5fa3401fb7bbfa00aaae175a33ee4de02d80267d8c2745d2bc90bb9e9895c2d6911380c746f5a31afdb6a573c3a7bde930ce3b4ce1e502faafef689979bd46c6b8e6186063a459455740e0848e091e9189688a68f393d5723a1bc75839c58626067df2378f00382103cd452f016cc05e9db2d0e21e40a63fe8de133fefb9e2f187e37d382ed5a3ff14bcff645f24ba5ec471402785509e0d449f6045395f6109e04e1ca9b32a609a8077b48babc36e187fdde17948f92cc34672a9675ec2d82eb7f48754ecc977f8db5553c3b53b8063e58f70901c598833a2e07daa9d2f626a6343c58f449408dd77742d595e2cbc19a3d026531d62340b9776549289f4b6b7836afae90e12b136ddadddf81a0afc9118a0edef34164ebe35bf518f4a131e04bd12bcb4f6321b1814306f2f378d8fda92859f457ad18c7e3dfe4a277874a403454cd88e92ff50cdb01537a7299b551569c7ca991c2d4181172980e93e5b34ade65304dce620384cff02d1d42f5f2569d4306a0a0e69b893aab337723e5a9a9834850c57f1831ada351bc170c8b236ed6ef380fb9a59e4c74c9d00dbe35a9fa1d60cda24f259359d9887102e4aeebe8c05b67c9236a022d397ddb5e95ecbcd62ff251c4f248e04f2ae9af914d0dea886f1d23a098ebb2601d7a107b381ecb2f3b1529ebff2556e13d798f9a6d587f5d7639eea49984185af84fb175e4e2c50e1ea82bf62a34aaed2eabbfbb3fee8c6fbb33be427ff42cc20162647b3984ac55f4d3b7be068e54a56d8994293d1c13a93b0e6cbdd926af4e262ff678885bc6ed2f9ad534e21f5d4cfa05b6156cb8cbedbede8873360540ed5ac814381553f7bb5b9a9e78154162eec302f83b3d78c3b612e0cd090032bf2f4dcbaa06969f235b67c55f7b0ffb184b64a5026fa1afc43ca6670d2ed3cf47dcac99eb43a2e0f79eed48754e3a0f49e3b082c228ee501eb29096075ceb7c8cc70b85fdf4af4d115c509f8ed0b936fc126a1dd0db7561e296a15cf083a8fcbcdedd0c1dae9cdb3cf306a6f0a69de31ba3abdd60666d73b4a7764f17924109163b2b237de32053790d6267f489e74f9dc05263887c222bd45cfbfccfc075cd00df54493225a75d6167def3a90d0f1773aa87669e9fcee19aeabeebecc9739f119ed365643e0c3332b9dd7767610729a476b568f58c6b442d512a21f0170b055016c45f5edeb4b81434246e7d29646118bec8389795e8b52d09355a7991b98a2d463ac81becdc7f690f974eac1c7c31f4306254cead8f6f9ccc83b1b9a71818c2fc1b594789e6fbeff89173ffe64ed8dc22ee00046ddd68425e2b69e207010e276b664881561e91aafd27c0e3d5beeef15cb728a330fa9193ae9f57403fc754c036bd9d8504b11f0b65ef02127fabda9a502089231a39c04a13e24ea6ba5c2c2f906d8bdb2e9c177dc20843f156c7e462efb3ac3662921c4c3968da2127f3e96cd74e2dc22e58def1f44f5db1b219561c2bb903ea7f3381e5d08502a431e8c1778124a7e1c6ae8a10c5ffd8d7dbeeda704f08530fc1867b80b8f3cc1bf0f51f74acb666eeea7f20524c0946282a5ba5f27eb2741a8ecd3127df77e2a0fd2d81232a112cb3d12a951b11ecfd0870201e3f8acfcee15908f018941e040c85331b702a5068cd4709465cbc5758e6abc67565bd01d17eb432b2d9aec729f725eb9fb636eaf23819c1c5139de8c9d2074863fcea6e5e83bedee257cddde4d9e4186e1e3f18613f49d01dfd0b73eed2402adf9034dbcffd36b4755ba1dcec20f64ee3b746fa0bdcd60b315f376c578ce0b9960fe0133fb4c97ebada0e681f90dcd344ab6e65b1a0d5afa3689cc8e7baea6ef00bd6e51f0937803b75a3414fd15aaec634f937c6b2775a6074fc7785b932250475235e950e5f4a53319715077b28e4f5059b7286462014ff88f310f846034082dfd7104ed30106437d5e38c906ade75c8546c7e4a9b1ec3ea906c310efb014913bba80bfbc72c2b57fda0dc9c67c0f31ad02e0340ced8c3bb9e61b756513aee792259355f5389b26a776ee577ff1b1268c3a0c50b0237c56e6fe0d34435b96f44e7e7f829820deeede58e8526b9b8175aa37a27a4b603e37e1ef1c79f146161cae8083e70ebeb96cda70cd3d95fa68fddbbb8e2349e422946ded25ccc27fdf1b169546fe79aa3e4d9f8a914e5e8dfed0f17638a495c36b29b7f1cf4be55fcbd491529718f29b67435207f41917723f2f26c9647a23ba468ba154a563bf7d35492665725ae0ec479484573b1e30056e5494d2af39b3aa66c82549db066e430d47e4c947a8f8d84c6138e1cd421049ecbd6a1e04d27d3beff847bcbbea7b100403883e5ab263dd33d20f2e097752c8718c22505272865b0ce37b6fb2e5a5a5567f80b565eff583691cf4ada237765a232394589c72306458ed62a0cd1671dba7b3a53eae16df8d6494266ed0ae3170dcca2e6fab2353b2b5f9f0bb55f0d28ba9b0f07a0693d3545046dc0fe3290f345196370ee9512e0805062931d9b3e95c6fdeaadd9cfcd77c970c3325071cf2ae0f8551f1978f183b7f41db88447345a6f1ebcb6fd4bc6374a5b2e785e6a9300dcdda13b9b3c652c2a9644ed5f6d6694241cf53f28961a0d82fa23d7e40c659fe60ec8010715f20ec2d96cbe0bec7fee9ab7e44b81263f3326530d69d697bd34197a8b65a7ae88ea88bb50e01d9782c8f39e8844f3d0e19fd6755ab88fc9d4519e638fcb0050d39ce4db8ce76a3c2b987cce6bf70f560c1d0be4e7a80772e0e8aaa5c1b034bac101a82e21005a5f83ab6ed02faa4977f8346b7d64b9b69c3b469382cfa6d2347d8cbbc0d9af98fc06e46120874bf1f57a6266825c40e751c6cd1cd56b3e0ae03815f801a2cf785583cae1be3cbca64de89b92eac8d179959b59a82ec08a73e4d1043d38dfa40695a7889a24e03c1742faff71a5daac3eaa00ed71c9c137dda202c91ac97a1f40fd7ef561a6c5aa790c2850c3f83d51c038cc0c2302d8ae215c345d36c9d8f534b034629197771d71eeaf95f39bd116d3f1d55edcaace47d6cb8275e5c1d32a5e95ecb9f2638fb4d636d83e5fbedbcf21af0fa5bae50a1f8b950b8508918ba40fcbc0a7a530c9e7f0af5e97152c2100994e3c817dc61c96ebab90b3898d3985596e5710bd28f2552ac44846c7bbbd3dd57c63217644720ff7714ab634eff92f785d4e3b87cb06b552f87251c9dbb3b9460d288dfd23468c721a5b2a309e39576e41ac1c3414e0c19d09386ea7c74c7df2efba25fc1a03c684ca532e2a6914d4a2e0b255d5e282ab6ce1dca74d7f9ecdaeeaadb5543c0bdaee4d7e255e11b08f0b4bd3bb8881d161a01bd748cd888a7951d0f1c40fc417b3408ceca8a0268c5aecfece920a0db0b17defd3fecdfafc296704db145be7b791956271678a1153565e084b447d9960cb939c02cdd1143a3194f195c897939e2bf13b6302d4a4ab3b3d874334c2b02532b5a6a28e7f2b686fb1756ba7b56e32d0fce3be207182eb2ced193cd63861129ebc2adeb70797f70f1c17a3708a488e9903b2aed001179cdbd5574457c0ff8965dfd811212c8ea889f84daeed9f169606052595562c55c31ef671a6a55c681b55e27f38660f184740ca4e2a56c1f5c4157c5f0ae19cc8c8a6dd759b28f52cc54d3e7cfebfab8e22ca71de2746d8a58854e0ea6d9868262f36c9b4ce0ed6dc87fcd068b0e4a8bb5198e0d218ef90f4c0db42d831d049705702ced49bd3834b81bd0129287f9269f705f0875876c1ca9823964ff31137ad9e03bf0e8c76393c23cfd39062e20c65bd", 0x1000}], 0x1, &(0x7f00000019c0)=[@hopopts_2292={{0x160, 0x29, 0x36, {0x5e, 0x28, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x5, 0x2, [0x9, 0x7fffffff, 0x100000001, 0x9, 0x5df6]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0xfb, 0x6, [0x4, 0xff]}}, @generic={0xff, 0xd3, "1afc64d0dbf10e8edde6bd8ae4fcfe3cca1e14fbeb5e19b2b833b754b9f4541e69fe87b564bcab834e565d6c32f3236c79fe06007332c1f4489da0af215fe77fb44aefd9c4a5d29d5a069d224096126d683bbdbf883332afa4be9b27c01aae11de5adb4d523b36741be07644f242cc311c68fa172b93e083e113c0d98dee4c0370b55ee57a47d89895ee49f188fa98ed87110587555752e9a63d9ae6a2dd2d594376050473f74190d57a4ded6cc4e1b34417121d52b6c0f3bcf4c9dcd4197e3fdfa1715945dd33a521c5854b20d7f6bb86107f"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7f, 0x20, [0x8, 0x2, 0x38]}}, @enc_lim={0x4, 0x1, 0x40}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x33, 0x1, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x1, [0x0]}]}}}], 0x188}}, {{&(0x7f0000001b80)={0xa, 0x4e22, 0x1, @remote, 0x6a87}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="e52cc060aac25039fb6a73852d2d6f7b4377a9092c857e17ba31df2a3959eb58bab75292ea2f0d4d", 0x28}, {&(0x7f0000001c00)="95a7e93935dcf566975711f6cd1b95d0aa5fc1572eb6e8d6adb9c5a8e45f00e2a8688c3739d6e7ea989f344d724b794f92a3f9ca22dd0f04e3b041c88532bdf05ce3a1613bcbbf8db1f0c4b3d54f82851403e10c70af780ee8b5d2e29856ef720b5f68c00c4402bc7a9abd3a41e77acd375e7b4555d59bf4c3a972ffbbe34a8a1527a3fd24935ae6", 0x88}], 0x2}}], 0x3, 0x44800)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="64faffffffffffffff18616c2c0063e2edbb24e716d28a828a7dadb7ea4075c8a2834b990d6bd215c6edba3ad48b955eb3b2835470091cbff986b838"])
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x408100, 0x0)

[ 3136.152875]  shmem_add_to_page_cache+0x760/0x1130
[ 3136.152898]  ? shmem_getattr+0x180/0x180
[ 3136.152930]  shmem_getpage_gfp.constprop.0+0x64a/0x1920
[ 3136.152958]  ? shmem_unuse_inode+0xf60/0xf60
03:04:59 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xff0fd052, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

[ 3136.152982]  shmem_fallocate+0x78a/0xd30
03:04:59 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x401, 0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/48}, 0x38, 0x0, 0x3000)
msgctl$MSG_STAT(r1, 0xb, &(0x7f00000010c0)=""/105)
msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000540)=""/4096)
msgctl$IPC_RMID(r0, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)

[ 3136.153007]  ? shmem_evict_inode+0xa20/0xa20
[ 3136.153023]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3136.153036]  ? SOFTIRQ_verbose+0x10/0x10
[ 3136.153061]  ? lock_acquire+0x197/0x470
[ 3136.153074]  ? __x64_sys_fallocate+0xcf/0x140
[ 3136.153091]  ? lock_release+0x680/0x680
[ 3136.153104]  ? _cond_resched+0x12/0x80
[ 3136.153122]  ? selinux_file_permission+0x92/0x520
[ 3136.153142]  ? shmem_evict_inode+0xa20/0xa20
[ 3136.153156]  vfs_fallocate+0x48f/0xd00
[ 3136.153175]  __x64_sys_fallocate+0xcf/0x140
[ 3136.153189]  do_syscall_64+0x33/0x40
[ 3136.153202]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3136.153212] RIP: 0033:0x7f04eff10b19
[ 3136.153225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3136.153232] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3136.153247] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3136.153255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3136.153263] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3136.153271] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
03:04:59 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 70)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3136.153279] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:04:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010b0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3136.193983] selinux_netlink_send: 21 callbacks suppressed
[ 3136.194003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17517 comm=syz-executor.2
03:05:00 executing program 1:
fallocate(0xffffffffffffffff, 0x10, 0x3, 0x4)
socket$netlink(0x10, 0x3, 0x2)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x80000001}, 0x0, 0x1, 0x4, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000340)={{0x0, 0x0, 0x80000001, 0x100, 0x3, 0x283df61a, 0x8, 0x80, 0x7fffffff, 0xfffffff8, 0x4, 0x100000000, 0x7, 0x8, 0x716}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="c14e2cc62750ea44ea9dc1d005f1a9e2512400000000002e2f6367726f75702f6367726f75702e70"])
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x7ff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r4, r2, 0x0, 0x80464c453f)

[ 3136.241812] FAULT_INJECTION: forcing a failure.
[ 3136.241812] name failslab, interval 1, probability 0, space 0, times 0
03:05:00 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x4c000000)

[ 3136.241826] CPU: 0 PID: 17514 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3136.241833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3136.241838] Call Trace:
[ 3136.241854]  dump_stack+0x107/0x167
[ 3136.241867]  should_fail.cold+0x5/0xa
[ 3136.241882]  ? create_object.isra.0+0x3a/0xa20
[ 3136.241897]  should_failslab+0x5/0x20
[ 3136.241909]  kmem_cache_alloc+0x5b/0x310
[ 3136.241923]  ? mark_held_locks+0x9e/0xe0
[ 3136.241937]  create_object.isra.0+0x3a/0xa20
[ 3136.241950]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3136.241966]  kmem_cache_alloc_bulk+0x168/0x320
[ 3136.241983]  io_submit_sqes+0x6f76/0x85c0
03:05:00 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78)

[ 3136.242016]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3136.242027]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3136.242042]  ? lock_downgrade+0x6d0/0x6d0
[ 3136.242052]  ? find_held_lock+0x2c/0x110
03:05:00 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d)
sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5e, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@generic="02e245c9ff"]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x63}, 0x1, 0x0, 0x0, 0x40881}, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @short}, 0x14)
sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0)

03:05:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010d0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3136.242068]  ? io_submit_sqes+0x85c0/0x85c0
[ 3136.242088]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3136.242104]  ? wait_for_completion_io+0x270/0x270
[ 3136.242118]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3136.242129]  ? vfs_write+0x354/0xa70
[ 3136.242141]  ? fput_many+0x2f/0x1a0
[ 3136.242154]  ? ksys_write+0x1a9/0x260
[ 3136.242167]  ? __ia32_sys_read+0xb0/0xb0
[ 3136.242182]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3136.242194]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3136.242208]  do_syscall_64+0x33/0x40
[ 3136.242219]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3136.242231] RIP: 0033:0x7fb2ae3d8b19
[ 3136.242243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3136.242250] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3136.242263] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3136.242270] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3136.242277] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3136.242284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3136.242292] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3136.454113] FAULT_INJECTION: forcing a failure.
[ 3136.454113] name failslab, interval 1, probability 0, space 0, times 0
[ 3136.454138] CPU: 1 PID: 17538 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3136.454150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3136.454158] Call Trace:
[ 3136.454184]  dump_stack+0x107/0x167
[ 3136.454209]  should_fail.cold+0x5/0xa
[ 3136.454237]  ? xas_alloc+0x336/0x440
[ 3136.454263]  should_failslab+0x5/0x20
[ 3136.454284]  kmem_cache_alloc+0x5b/0x310
[ 3136.454302]  ? trace_hardirqs_on+0x5b/0x180
[ 3136.454330]  xas_alloc+0x336/0x440
[ 3136.454356]  xas_create+0x34a/0x10d0
[ 3136.454400]  xas_create_range+0x189/0x620
[ 3136.454443]  shmem_add_to_page_cache+0x760/0x1130
[ 3136.454482]  ? shmem_getattr+0x180/0x180
[ 3136.454535]  shmem_getpage_gfp.constprop.0+0x64a/0x1920
[ 3136.454585]  ? shmem_unuse_inode+0xf60/0xf60
[ 3136.454625]  shmem_fallocate+0x78a/0xd30
[ 3136.454668]  ? shmem_evict_inode+0xa20/0xa20
[ 3136.454694]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3136.454715]  ? SOFTIRQ_verbose+0x10/0x10
[ 3136.454758]  ? lock_acquire+0x197/0x470
[ 3136.454779]  ? __x64_sys_fallocate+0xcf/0x140
[ 3136.454807]  ? lock_release+0x680/0x680
[ 3136.454827]  ? _cond_resched+0x12/0x80
[ 3136.454857]  ? selinux_file_permission+0x92/0x520
[ 3136.454891]  ? shmem_evict_inode+0xa20/0xa20
[ 3136.454914]  vfs_fallocate+0x48f/0xd00
[ 3136.454946]  __x64_sys_fallocate+0xcf/0x140
[ 3136.454971]  do_syscall_64+0x33/0x40
[ 3136.454991]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3136.455006] RIP: 0033:0x7f04eff10b19
[ 3136.455026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3136.455038] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3136.455063] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3136.455076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3136.455089] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3136.455101] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3136.455114] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3136.763599] FAULT_INJECTION: forcing a failure.
[ 3136.763599] name failslab, interval 1, probability 0, space 0, times 0
[ 3136.763681] CPU: 1 PID: 17550 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3136.763692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3136.763699] Call Trace:
[ 3136.763724]  dump_stack+0x107/0x167
[ 3136.763744]  should_fail.cold+0x5/0xa
[ 3136.763772]  should_failslab+0x5/0x20
[ 3136.763792]  kmem_cache_alloc_bulk+0x4b/0x320
[ 3136.763819]  io_submit_sqes+0x6f76/0x85c0
[ 3136.763870]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3136.763888]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3136.763913]  ? lock_downgrade+0x6d0/0x6d0
[ 3136.763930]  ? find_held_lock+0x2c/0x110
[ 3136.763955]  ? io_submit_sqes+0x85c0/0x85c0
[ 3136.763984]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3136.764009]  ? wait_for_completion_io+0x270/0x270
[ 3136.764032]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3136.764050]  ? vfs_write+0x354/0xa70
[ 3136.764069]  ? fput_many+0x2f/0x1a0
[ 3136.764090]  ? ksys_write+0x1a9/0x260
[ 3136.764109]  ? __ia32_sys_read+0xb0/0xb0
[ 3136.764133]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3136.764152]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3136.764174]  do_syscall_64+0x33/0x40
[ 3136.764193]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3136.764206] RIP: 0033:0x7fb2ae3d8b19
[ 3136.764225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3136.764235] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3136.764257] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3136.764269] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3136.764280] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3136.764292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3136.764303] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:05:15 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 71)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:05:15 executing program 7:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="017e00000100000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80080, 0x0)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close(r3)
perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0x2d, 0x1f, 0x4, 0x8, 0x0, 0x4, 0x480, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x7f}, 0x953, 0x2, 0x1, 0xb, 0x40, 0x6, 0x7, 0x0, 0x6, 0x0, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xa)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000380)=0x45, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r3, 0x0)
r4 = getpgrp(0x0)
setpriority(0x0, r4, 0x0)
perf_event_open(&(0x7f00000008c0)={0x7, 0x80, 0x7, 0x39, 0x0, 0x1f, 0x0, 0xfffffffffffffff5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x1}, 0x3000, 0x1, 0x40, 0x9, 0x0, 0x2, 0x82, 0x0, 0x12, 0x0, 0xab}, r4, 0xd, r0, 0x2)
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000006c0)=ANY=[@ANYBLOB="010600000000001c180000fafaffb436280760754af3d29c3c258f78f366f7134bac626262acbabc7eef72e4d95a22bed820b7b49be3ee1ffccb0384038c7eaa6ce71870223da33b85dc6413a1f35d4d20c7e3c0715f021d1fa30282c92a68ccb99efe46990885fc625ed0fa281ccf4e055a91f08845334720ef6bb2b2746247621b1dd8148e321ba9a9ceafae243fcc0769a25b88088fc4e34089e86a247652984e5452db52a3ee68850f937afdbece2c5ed5a4c4a5a8ef9e9cd3e1ff2ebcb2436bb26934170b33c8ac000831e9e03b535797cfb69400"/230, @ANYRES32=r5, @ANYRESDEC])
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)="946356f28815adb9c7b918a4e137cd7400ff6319ce5ba1f2001b6ff6497d7e", 0x1f}, {&(0x7f0000000140)="726b108c02f17c024b516b3d6818db3e2f", 0x11}, {&(0x7f0000000240)="c3afdac2813661e21955945ad19e1b7c6c1485df6b96a47668a852cf95112705e87a12f1b278f33018479e7cce287f328ca60c827fb3632c019087a6ff858d8f854a6d527739b057eb740da584ad10c52b8ae5b98e1a298ab4589bbdb456cc9079dbe9fc329fd15cca48bae0d44be041367bfe886b1bb9a0dc451432e946a1b71fcbd0269399e6ec82e5ca74ac858e9b09b2be5bbb4b564e184ace248882ac7dce251384", 0xa4}, {&(0x7f00000003c0)="43a7bc5dfc17bf498b287080d7badb6fe6b4489aa72f607e87e8141b01ce661ac9b42fee3e4bcfc9ef03c3444ba7b40fb7e5414286dceabf3036021a3a0b27ac99fba983632bfbb2e7d768e5db383448fb479067de1b539f784f56158f0ef9170468ce71850a8c9d86dbc2868a2c34d037ed45bab0a58455868f2b6998857d1827231ad47b6abc61dad620bd091e560ee665c4f7f8b6da81bc710dcf25c276721f6d", 0xa2}, {&(0x7f0000000480)="634c81333e6dd201f6f4843126f7ca79347c50ec06116ae981bbcf5e84699cf583348a41e2afc4a5843ec7850e7646f360c819f302d1150d45139784e2de94349289a4b2474b44066852a83b69f449a73f222eb13b69375ccc0cb40446920d8209b2732f35adc8667efb1eb1ea7ef0329e77eec99ade1e6ed9229a9a9d6fd102ae8d8c650016a66d3ae9ed4d353f89a378c46c983577e0f0cf405fa898d38bc800e5943c9836fce04d2e3d1cfc25a719d72b8c2b621764215c1dd0baf1d67a0b6990880e86f1", 0xc6}, {&(0x7f0000000180)="fd2e908320b6", 0x6}, {&(0x7f0000000580)="febe85dec118a9e719045781a811a22d9a034057e4823c66b5e58c241a3794391702ccd73c2dff67d38c703cd66963056684aeed0f1a772eb3da3849a42287b8f045e3182f543857d79e86bb519b184ff9bd008cf0d58026313806d7383206ab3973bcf4a0771e786fdfcdadf2141cdffaa5990e5495c0a83f99156a8594ba1f1929fdb59ebb3f19a994b0779ace554fe8593b2022c577f697695ce150c1d9d6aafb054f58e8faa45fc47d7eb925449800000000", 0xb4}], 0x7, 0x100, 0x0)

03:05:15 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79)

03:05:15 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x68000000)

03:05:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x6, &(0x7f0000000040), 0x1, 0x1, 0x1}, 0x3)

03:05:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010f0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:15 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xffff8000, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:05:15 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x180, 0x2)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3151.773066] FAULT_INJECTION: forcing a failure.
[ 3151.773066] name failslab, interval 1, probability 0, space 0, times 0
[ 3151.774748] CPU: 0 PID: 17586 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3151.775768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3151.777010] Call Trace:
[ 3151.777416]  dump_stack+0x107/0x167
[ 3151.777970]  should_fail.cold+0x5/0xa
[ 3151.778546]  ? create_object.isra.0+0x3a/0xa20
[ 3151.779231]  should_failslab+0x5/0x20
[ 3151.779805]  kmem_cache_alloc+0x5b/0x310
[ 3151.780428]  create_object.isra.0+0x3a/0xa20
[ 3151.781099]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3151.781866]  kmem_cache_alloc+0x159/0x310
[ 3151.782494]  ? trace_hardirqs_on+0x5b/0x180
[ 3151.783156]  xas_alloc+0x336/0x440
[ 3151.783701]  xas_create+0x34a/0x10d0
[ 3151.784272]  xas_create_range+0x189/0x620
[ 3151.784922]  shmem_add_to_page_cache+0x760/0x1130
[ 3151.785657]  ? shmem_getattr+0x180/0x180
[ 3151.786293]  shmem_getpage_gfp.constprop.0+0x64a/0x1920
[ 3151.787115]  ? shmem_unuse_inode+0xf60/0xf60
[ 3151.787794]  shmem_fallocate+0x78a/0xd30
[ 3151.788425]  ? shmem_evict_inode+0xa20/0xa20
[ 3151.789100]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3151.789887]  ? SOFTIRQ_verbose+0x10/0x10
[ 3151.790534]  ? lock_acquire+0x197/0x470
[ 3151.791136]  ? __x64_sys_fallocate+0xcf/0x140
[ 3151.791826]  ? lock_release+0x680/0x680
[ 3151.792428]  ? _cond_resched+0x12/0x80
[ 3151.793030]  ? selinux_file_permission+0x92/0x520
[ 3151.793767]  ? shmem_evict_inode+0xa20/0xa20
[ 3151.794439]  vfs_fallocate+0x48f/0xd00
[ 3151.795038]  __x64_sys_fallocate+0xcf/0x140
[ 3151.795698]  do_syscall_64+0x33/0x40
[ 3151.796264]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3151.797034] RIP: 0033:0x7f04eff10b19
[ 3151.797592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3151.800339] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3151.801488] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3151.802564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3151.803644] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3151.804726] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3151.805815] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3151.811023] FAULT_INJECTION: forcing a failure.
[ 3151.811023] name failslab, interval 1, probability 0, space 0, times 0
[ 3151.812016] CPU: 1 PID: 17591 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3151.812580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3151.813262] Call Trace:
[ 3151.813477]  dump_stack+0x107/0x167
[ 3151.813779]  should_fail.cold+0x5/0xa
[ 3151.814092]  ? create_object.isra.0+0x3a/0xa20
[ 3151.814476]  should_failslab+0x5/0x20
[ 3151.814775]  kmem_cache_alloc+0x5b/0x310
[ 3151.815116]  ? mark_held_locks+0x9e/0xe0
[ 3151.815456]  create_object.isra.0+0x3a/0xa20
[ 3151.815801]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3151.816222]  kmem_cache_alloc_bulk+0x168/0x320
[ 3151.816569]  io_submit_sqes+0x6f76/0x85c0
[ 3151.816931]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3151.817342]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3151.817741]  ? lock_downgrade+0x6d0/0x6d0
[ 3151.818055]  ? find_held_lock+0x2c/0x110
[ 3151.818363]  ? io_submit_sqes+0x85c0/0x85c0
[ 3151.818726]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3151.819095]  ? wait_for_completion_io+0x270/0x270
[ 3151.819491]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3151.819844]  ? vfs_write+0x354/0xa70
[ 3151.820151]  ? fput_many+0x2f/0x1a0
[ 3151.820452]  ? ksys_write+0x1a9/0x260
[ 3151.820753]  ? __ia32_sys_read+0xb0/0xb0
[ 3151.821062]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3151.821496]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3151.821921]  do_syscall_64+0x33/0x40
[ 3151.822227]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3151.822625] RIP: 0033:0x7fb2ae3d8b19
[ 3151.822907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3151.824403] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3151.825042] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3151.825638] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3151.826214] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3151.826794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3151.827376] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:05:15 executing program 1:
openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, 0x0, 0x325, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x20040000)
fcntl$setlease(r3, 0x400, 0x1)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/83, 0x53}], 0x2)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4)
readahead(r0, 0x37, 0x0)
ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0)

03:05:15 executing program 7:
clock_gettime(0x1, &(0x7f00000003c0)={<r0=>0x0})
setitimer(0x0, &(0x7f0000000400)={{r0}}, &(0x7f0000000480))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000280), 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000000000000001000004d20a0061002d245ec72ab9e0ba00000000000000000300"/56], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000040)
sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000007c0)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, @in6=@local, 0x0, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2b}, @in6=@empty, {}, {0x7ffffffe}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x80}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
pread64(r2, &(0x7f0000000180)=""/26, 0x1a, 0x9)
mq_timedsend(r2, &(0x7f0000000240)="c041f3eb686e5a5120570d8f68413d18721491c8f9d75c89fb90f5f330dcf94b9e76d0061a815a2b0fe9196c3a1fba6f00b4b2a8c17266728caae24484bedf897ec0fbe9e9fac0f4bac99e9ba9acc48c5b3d348e4bca397d8279ff1470dcd8a492151e186bd6c413d2d3881a87", 0x6d, 0x7f, &(0x7f00000002c0))
creat(0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000))
signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x1]}, 0x8, 0x80000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec0000001f00080028bd7000fddbdf25ac1414bb000000000000000000000000000004d60a003c00000000000000000000000000000000000200000004350000630002006374732863666228616e756269732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000024235958dd7eaa4824d8ac2c1c89ebc74262a11f76f6c770dcc8360008001600018000002c0013000a090101000000000001000000000000ac1414bb000000000000000000000000000000000a00000008000c00f0ffffff0b0015000900000009000000"], 0xec}, 0x1, 0x0, 0x0, 0x24004811}, 0x8000)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1000, 0x2)
inotify_rm_watch(0xffffffffffffffff, 0x0)

03:05:15 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80)

03:05:15 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000340)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000480)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0))
openat(0xffffffffffffffff, 0x0, 0x446c84, 0x0)

03:05:15 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xffffdf52, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:05:15 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000340)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000480)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0))
openat(0xffffffffffffffff, 0x0, 0x446c84, 0x0)

03:05:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001110470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380012e0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:15 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x6c000000)

[ 3152.064211] FAULT_INJECTION: forcing a failure.
[ 3152.064211] name failslab, interval 1, probability 0, space 0, times 0
[ 3152.066186] CPU: 0 PID: 17606 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3152.067291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3152.068623] Call Trace:
[ 3152.069058]  dump_stack+0x107/0x167
[ 3152.069648]  should_fail.cold+0x5/0xa
[ 3152.070268]  ? create_object.isra.0+0x3a/0xa20
[ 3152.071009]  should_failslab+0x5/0x20
[ 3152.071627]  kmem_cache_alloc+0x5b/0x310
[ 3152.072289]  create_object.isra.0+0x3a/0xa20
[ 3152.073010]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3152.073832]  kmem_cache_alloc_bulk+0x168/0x320
[ 3152.074576]  io_submit_sqes+0x6f76/0x85c0
[ 3152.075282]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3152.076093]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3152.076882]  ? lock_downgrade+0x6d0/0x6d0
[ 3152.077548]  ? find_held_lock+0x2c/0x110
[ 3152.078214]  ? io_submit_sqes+0x85c0/0x85c0
[ 3152.078917]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3152.079696]  ? wait_for_completion_io+0x270/0x270
[ 3152.080473]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3152.081227]  ? vfs_write+0x354/0xa70
[ 3152.081826]  ? fput_many+0x2f/0x1a0
[ 3152.082413]  ? ksys_write+0x1a9/0x260
[ 3152.083024]  ? __ia32_sys_read+0xb0/0xb0
[ 3152.083682]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3152.084528]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3152.085364]  do_syscall_64+0x33/0x40
[ 3152.085968]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3152.086787] RIP: 0033:0x7fb2ae3d8b19
[ 3152.087393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3152.090325] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3152.091564] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3152.092711] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3152.093854] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3152.095004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3152.096149] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:05:29 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140)={0x0, 0x7da3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=<r1=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r7 = syz_io_uring_setup(0x4b0, &(0x7f0000000240)={0x0, 0x28e4, 0x20, 0x0, 0x229, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000400))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r1, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r6, 0x0, &(0x7f00000001c0)="b4f8cb2c810e14a53d77ebc2272b92664360a295bb0f678626741fb6", 0x0, 0x884, 0x0, {0x0, r9}}, 0xeb9f)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd, 0xff, 0x0, 0x1, 0x4, 0x1}, 0x7)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x8, 0x4, 0x1}, 0x80)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:05:29 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0xffffffe4, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:05:29 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
ioctl$SG_IO(r1, 0x2285, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
fcntl$dupfd(r4, 0x406, r5)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008e40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_any}]}})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'})

03:05:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001480470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:29 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 72)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:05:29 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81)

03:05:29 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x74000000)

[ 3165.564536] FAULT_INJECTION: forcing a failure.
[ 3165.564536] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3165.566613] CPU: 1 PID: 17646 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3165.567647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3165.568885] Call Trace:
[ 3165.569280]  dump_stack+0x107/0x167
[ 3165.569814]  should_fail.cold+0x5/0xa
[ 3165.570382]  __alloc_pages_nodemask+0x182/0x600
[ 3165.571080]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3165.571975]  ? lock_downgrade+0x6d0/0x6d0
[ 3165.572601]  ? lock_acquire+0x197/0x470
[ 3165.573222]  alloc_pages_vma+0xbb/0x410
[ 3165.573840]  shmem_alloc_page+0x10f/0x1e0
[ 3165.574470]  ? shmem_init_inode+0x20/0x20
[ 3165.575109]  ? percpu_counter_add_batch+0x8b/0x140
[ 3165.575857]  ? __vm_enough_memory+0x184/0x360
[ 3165.576548]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3165.577368]  ? shmem_unuse_inode+0xf60/0xf60
[ 3165.578052]  shmem_fallocate+0x78a/0xd30
[ 3165.578686]  ? shmem_evict_inode+0xa20/0xa20
[ 3165.579340]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3165.580113]  ? SOFTIRQ_verbose+0x10/0x10
[ 3165.580747]  ? lock_acquire+0x197/0x470
[ 3165.581351]  ? __x64_sys_fallocate+0xcf/0x140
[ 3165.582023]  ? lock_release+0x680/0x680
[ 3165.582604]  ? _cond_resched+0x12/0x80
[ 3165.583180]  ? selinux_file_permission+0x92/0x520
[ 3165.583890]  ? shmem_evict_inode+0xa20/0xa20
[ 3165.584539]  vfs_fallocate+0x48f/0xd00
[ 3165.585123]  __x64_sys_fallocate+0xcf/0x140
[ 3165.585757]  do_syscall_64+0x33/0x40
[ 3165.586306]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3165.587041] RIP: 0033:0x7f04eff10b19
[ 3165.587587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3165.590223] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3165.591326] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3165.592337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3165.593371] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3165.594412] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3165.595452] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3165.645847] FAULT_INJECTION: forcing a failure.
[ 3165.645847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3165.648651] CPU: 0 PID: 17640 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3165.649782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3165.651123] Call Trace:
[ 3165.651571]  dump_stack+0x107/0x167
[ 3165.652174]  should_fail.cold+0x5/0xa
[ 3165.652818]  _copy_from_user+0x2e/0x1b0
[ 3165.653474]  __copy_msghdr_from_user+0x91/0x4b0
[ 3165.654208]  ? __ia32_sys_shutdown+0x80/0x80
[ 3165.654937]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3165.655644]  ? find_held_lock+0x2c/0x110
[ 3165.656294]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3165.657165]  ? lock_chain_count+0x20/0x20
[ 3165.657826]  ? __is_insn_slot_addr+0x123/0x290
[ 3165.658566]  ? lock_downgrade+0x6d0/0x6d0
[ 3165.659249]  io_recvmsg+0xae8/0xd70
[ 3165.659850]  ? lock_chain_count+0x20/0x20
[ 3165.660524]  ? io_sendmsg+0x830/0x830
[ 3165.661154]  ? mark_lock+0xf5/0x2df0
[ 3165.661769]  ? lock_chain_count+0x20/0x20
[ 3165.662453]  ? __lock_acquire+0xbb1/0x5b00
[ 3165.663164]  ? __lock_acquire+0xbb1/0x5b00
[ 3165.663851]  io_issue_sqe+0x3bd6/0x7700
[ 3165.664510]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3165.665353]  ? SOFTIRQ_verbose+0x10/0x10
[ 3165.666018]  ? percpu_ref_put_many+0x153/0x2b0
[ 3165.666762]  ? io_connect+0x610/0x610
[ 3165.667390]  ? lock_acquire+0x197/0x470
[ 3165.668040]  ? find_held_lock+0x2c/0x110
[ 3165.668711]  ? __fget_files+0x26d/0x4c0
[ 3165.669364]  ? lock_downgrade+0x6d0/0x6d0
[ 3165.670044]  __io_queue_sqe+0x90/0x9d0
[ 3165.670690]  ? io_issue_sqe+0x7700/0x7700
[ 3165.671387]  io_submit_sqes+0x4461/0x85c0
[ 3165.672105]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3165.672918]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3165.673702]  ? lock_downgrade+0x6d0/0x6d0
[ 3165.674370]  ? find_held_lock+0x2c/0x110
[ 3165.675031]  ? io_submit_sqes+0x85c0/0x85c0
[ 3165.675744]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3165.676532]  ? wait_for_completion_io+0x270/0x270
[ 3165.677321]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3165.678063]  ? vfs_write+0x354/0xa70
[ 3165.678668]  ? fput_many+0x2f/0x1a0
[ 3165.679253]  ? ksys_write+0x1a9/0x260
[ 3165.679874]  ? __ia32_sys_read+0xb0/0xb0
[ 3165.680539]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3165.681400]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3165.682238]  do_syscall_64+0x33/0x40
[ 3165.682853]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3165.683679] RIP: 0033:0x7fb2ae3d8b19
[ 3165.684281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3165.687217] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3165.688451] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3165.689606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3165.690754] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3165.691905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3165.693052] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:05:29 executing program 7:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x34}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000810}, 0x8000)
fallocate(r2, 0x0, 0x0, 0x1000002)
ftruncate(0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x100000001)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x4400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'uid_map\x00'}}, {@aname}, {@access_client}, {@noextend}, {@cachetag={'cachetag', 0x3d, '&'}}, {@noextend}, {@mmap}], [{@seclabel}, {@dont_hash}, {@dont_measure}]}})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0)

03:05:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r2=>0x0, 0x0, 0x0, 0x1, 0x0, 0x8, @rand_addr=' \x01\x00', @empty}})
r3 = signalfd4(r0, &(0x7f00000000c0)={[0x3]}, 0x8, 0x40000)
bind$packet(r3, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x4081)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00')

03:05:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380014c0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:29 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 73)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:05:29 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82)

[ 3165.919653] kernel read not supported for file /asound/seq/clients (pid: 15599 comm: kworker/0:2)
[ 3165.989015] FAULT_INJECTION: forcing a failure.
[ 3165.989015] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3165.991608] CPU: 0 PID: 17683 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3165.992735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3165.994389] Call Trace:
[ 3165.994824]  dump_stack+0x107/0x167
[ 3165.995411]  should_fail.cold+0x5/0xa
[ 3165.996032]  __alloc_pages_nodemask+0x182/0x600
[ 3165.996798]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3165.997765]  ? lock_downgrade+0x6d0/0x6d0
[ 3165.998429]  ? lock_acquire+0x197/0x470
[ 3165.999094]  alloc_pages_vma+0xbb/0x410
[ 3165.999746]  shmem_alloc_page+0x10f/0x1e0
[ 3166.000419]  ? shmem_init_inode+0x20/0x20
[ 3166.001114]  ? percpu_counter_add_batch+0x8b/0x140
[ 3166.001919]  ? __vm_enough_memory+0x184/0x360
[ 3166.002651]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3166.003530]  ? shmem_unuse_inode+0xf60/0xf60
[ 3166.004253]  shmem_fallocate+0x78a/0xd30
[ 3166.004939]  ? shmem_evict_inode+0xa20/0xa20
[ 3166.005646]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3166.006490]  ? SOFTIRQ_verbose+0x10/0x10
[ 3166.007159]  ? lock_acquire+0x197/0x470
[ 3166.007805]  ? __x64_sys_fallocate+0xcf/0x140
[ 3166.008531]  ? lock_release+0x680/0x680
[ 3166.009185]  ? _cond_resched+0x12/0x80
[ 3166.009821]  ? selinux_file_permission+0x92/0x520
[ 3166.010606]  ? shmem_evict_inode+0xa20/0xa20
[ 3166.011319]  vfs_fallocate+0x48f/0xd00
[ 3166.011960]  __x64_sys_fallocate+0xcf/0x140
[ 3166.012653]  do_syscall_64+0x33/0x40
[ 3166.013263]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3166.014084] RIP: 0033:0x7f04eff10b19
[ 3166.014690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3166.017755] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3166.018965] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3166.020092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3166.021260] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3166.022384] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3166.023529] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3166.072061] FAULT_INJECTION: forcing a failure.
[ 3166.072061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3166.073865] CPU: 1 PID: 17685 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3166.074899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3166.076130] Call Trace:
[ 3166.076541]  dump_stack+0x107/0x167
[ 3166.077106]  should_fail.cold+0x5/0xa
[ 3166.077697]  _copy_from_user+0x2e/0x1b0
[ 3166.078308]  __copy_msghdr_from_user+0x91/0x4b0
[ 3166.079012]  ? __ia32_sys_shutdown+0x80/0x80
[ 3166.079711]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3166.080393]  ? find_held_lock+0x2c/0x110
[ 3166.081014]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3166.081814]  ? lock_chain_count+0x20/0x20
[ 3166.082443]  ? __is_insn_slot_addr+0x123/0x290
[ 3166.083134]  ? lock_downgrade+0x6d0/0x6d0
[ 3166.083762]  io_recvmsg+0xae8/0xd70
[ 3166.084319]  ? lock_chain_count+0x20/0x20
[ 3166.084951]  ? io_sendmsg+0x830/0x830
[ 3166.085538]  ? mark_lock+0xf5/0x2df0
[ 3166.086109]  ? lock_chain_count+0x20/0x20
[ 3166.086748]  ? __lock_acquire+0xbb1/0x5b00
[ 3166.087415]  ? __lock_acquire+0xbb1/0x5b00
[ 3166.088066]  io_issue_sqe+0x3bd6/0x7700
[ 3166.088674]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3166.089472]  ? SOFTIRQ_verbose+0x10/0x10
[ 3166.090087]  ? percpu_ref_put_many+0x153/0x2b0
[ 3166.090776]  ? io_connect+0x610/0x610
[ 3166.091356]  ? lock_acquire+0x197/0x470
[ 3166.091963]  ? find_held_lock+0x2c/0x110
[ 3166.092599]  ? __fget_files+0x26d/0x4c0
[ 3166.093207]  ? lock_downgrade+0x6d0/0x6d0
[ 3166.093842]  __io_queue_sqe+0x90/0x9d0
[ 3166.094452]  ? io_issue_sqe+0x7700/0x7700
[ 3166.095097]  io_submit_sqes+0x4461/0x85c0
[ 3166.095761]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3166.096502]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3166.097260]  ? lock_downgrade+0x6d0/0x6d0
[ 3166.097879]  ? find_held_lock+0x2c/0x110
[ 3166.098504]  ? io_submit_sqes+0x85c0/0x85c0
[ 3166.099163]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3166.099902]  ? wait_for_completion_io+0x270/0x270
[ 3166.100626]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3166.101332]  ? vfs_write+0x354/0xa70
[ 3166.101898]  ? fput_many+0x2f/0x1a0
[ 3166.102448]  ? ksys_write+0x1a9/0x260
[ 3166.103016]  ? __ia32_sys_read+0xb0/0xb0
[ 3166.103630]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3166.104419]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3166.105191]  do_syscall_64+0x33/0x40
[ 3166.105755]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3166.106511] RIP: 0033:0x7fb2ae3d8b19
[ 3166.107069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3166.109759] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3166.110886] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3166.111936] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3166.112986] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3166.114027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3166.115069] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:05:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f})
r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
close(r3)
perf_event_open(0x0, 0x0, 0xc, r3, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5e, 0x906, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, r2, 0xa)
open(&(0x7f0000000180)='./file0\x00', 0x18000, 0x80)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340))
lseek(r2, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0)

03:05:44 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83)

03:05:44 executing program 7:
syz_io_uring_setup(0x5705, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x6, 0x2, 0x0, 0x6d5c, 0x3, 0x1}, 0x4)
syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))

03:05:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001680470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)={0x2, 'hsr0\x00', {0x10000}, 0x6})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r6=>0x0)
syz_open_procfs(r6, &(0x7f00000001c0)='stack\x00')

03:05:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x7a000000)

03:05:44 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:05:44 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 74)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3180.925386] FAULT_INJECTION: forcing a failure.
[ 3180.925386] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3180.926590] CPU: 1 PID: 17717 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3180.927231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3180.928003] Call Trace:
[ 3180.928262]  dump_stack+0x107/0x167
[ 3180.928607]  should_fail.cold+0x5/0xa
[ 3180.928977]  __alloc_pages_nodemask+0x182/0x600
[ 3180.929425]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3180.929987]  ? lock_downgrade+0x6d0/0x6d0
[ 3180.930374]  ? lock_acquire+0x1b9/0x470
[ 3180.930762]  alloc_pages_vma+0xbb/0x410
[ 3180.931144]  shmem_alloc_page+0x10f/0x1e0
[ 3180.931537]  ? shmem_init_inode+0x20/0x20
[ 3180.931944]  ? percpu_counter_add_batch+0x8b/0x140
[ 3180.932409]  ? __vm_enough_memory+0x184/0x360
[ 3180.932827]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3180.933349]  ? shmem_unuse_inode+0xf60/0xf60
[ 3180.933766]  shmem_fallocate+0x78a/0xd30
[ 3180.934158]  ? shmem_evict_inode+0xa20/0xa20
[ 3180.934570]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3180.935054]  ? SOFTIRQ_verbose+0x10/0x10
[ 3180.935443]  ? lock_acquire+0x197/0x470
[ 3180.935817]  ? __x64_sys_fallocate+0xcf/0x140
[ 3180.936257]  ? lock_release+0x680/0x680
[ 3180.936644]  ? _cond_resched+0x12/0x80
[ 3180.937022]  ? selinux_file_permission+0x92/0x520
[ 3180.937476]  ? shmem_evict_inode+0xa20/0xa20
[ 3180.937890]  vfs_fallocate+0x48f/0xd00
[ 3180.938262]  __x64_sys_fallocate+0xcf/0x140
[ 3180.938665]  do_syscall_64+0x33/0x40
[ 3180.939015]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3180.939492] RIP: 0033:0x7f04eff10b19
[ 3180.939839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3180.941526] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3180.942218] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3180.942865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3180.943507] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3180.944161] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3180.944814] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3180.958572] FAULT_INJECTION: forcing a failure.
[ 3180.958572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3180.959879] CPU: 1 PID: 17701 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3180.960514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3180.961278] Call Trace:
[ 3180.961524]  dump_stack+0x107/0x167
[ 3180.961859]  should_fail.cold+0x5/0xa
[ 3180.962222]  _copy_from_user+0x2e/0x1b0
[ 3180.962598]  __copy_msghdr_from_user+0x91/0x4b0
[ 3180.963037]  ? __ia32_sys_shutdown+0x80/0x80
[ 3180.963467]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3180.963883]  ? find_held_lock+0x2c/0x110
[ 3180.964268]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3180.964777]  ? lock_chain_count+0x20/0x20
[ 3180.965176]  ? __is_insn_slot_addr+0x123/0x290
[ 3180.965605]  ? lock_downgrade+0x6d0/0x6d0
[ 3180.966002]  io_recvmsg+0xae8/0xd70
[ 3180.966354]  ? lock_chain_count+0x20/0x20
[ 3180.966749]  ? mark_lock+0xf5/0x2df0
[ 3180.967093]  ? io_sendmsg+0x830/0x830
[ 3180.967458]  ? lock_chain_count+0x20/0x20
[ 3180.967846]  ? mark_lock+0xf5/0x2df0
[ 3180.968217]  ? lock_chain_count+0x20/0x20
[ 3180.968615]  ? __lock_acquire+0xbb1/0x5b00
[ 3180.969066]  ? __lock_acquire+0xbb1/0x5b00
[ 3180.969479]  io_issue_sqe+0x3bd6/0x7700
[ 3180.969870]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3180.970357]  ? SOFTIRQ_verbose+0x10/0x10
[ 3180.970739]  ? percpu_ref_put_many+0x153/0x2b0
[ 3180.971168]  ? io_connect+0x610/0x610
[ 3180.971533]  ? lock_acquire+0x197/0x470
[ 3180.971905]  ? find_held_lock+0x2c/0x110
[ 3180.972297]  ? __fget_files+0x26d/0x4c0
[ 3180.972674]  ? lock_downgrade+0x6d0/0x6d0
[ 3180.973066]  __io_queue_sqe+0x90/0x9d0
[ 3180.973439]  ? io_issue_sqe+0x7700/0x7700
[ 3180.973847]  io_submit_sqes+0x4461/0x85c0
[ 3180.974259]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3180.974715]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3180.975163]  ? lock_downgrade+0x6d0/0x6d0
[ 3180.975545]  ? find_held_lock+0x2c/0x110
[ 3180.975932]  ? io_submit_sqes+0x85c0/0x85c0
[ 3180.976342]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3180.976804]  ? wait_for_completion_io+0x270/0x270
[ 3180.977255]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3180.977689]  ? vfs_write+0x354/0xa70
[ 3180.978031]  ? fput_many+0x2f/0x1a0
[ 3180.978373]  ? ksys_write+0x1a9/0x260
[ 3180.978729]  ? __ia32_sys_read+0xb0/0xb0
[ 3180.979111]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3180.979593]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3180.980072]  do_syscall_64+0x33/0x40
[ 3180.980418]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3180.980890] RIP: 0033:0x7fb2ae3d8b19
[ 3180.981246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3180.982908] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3180.983596] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3180.984238] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3180.984881] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3180.985528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3180.986168] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:05:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380016c0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f})
r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
close(r3)
perf_event_open(0x0, 0x0, 0xc, r3, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5e, 0x906, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, r2, 0xa)
open(&(0x7f0000000180)='./file0\x00', 0x18000, 0x80)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340))
lseek(r2, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0)

03:05:44 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x20, 0x21, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x1078, 0x23, 0x304, 0x70bd2a, 0x25dfdbfe, {0x10}, [@generic="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", @generic="d976cc9a95c3afde7616451a504b87755bfc19c45ccafff3c3692b15a11fd34c92d844d4b6ef46d8fbe6a9e6907b77edb2bad04b9851efbe85d3979c7b1414375f2679a9b82ec47f1dbe3b6e47b272c12621e94d2cd95f455dd18c932a185cbc2add50"]}, 0x1078}, 0x1, 0x0, 0x0, 0x40}, 0x8080)

[ 3181.064154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'.
03:05:44 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xcf8feeef)

[ 3181.068881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17735 comm=syz-executor.7
[ 3181.073836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 3181.080641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17736 comm=syz-executor.7
03:05:44 executing program 7:
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x46e2, 0x8)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)}, {&(0x7f00000004c0)="7b757c489c6c3cad5da7a60478df485cdcd345b260249817ae42f6ba9cc240406119ee7883627db6a52e271ed734c31346b38ea2da2fa7c852eae71c8b5794b860f48282cd44f67b00826ed843ce9d08c8efb395f5bcc05d8d5006569fb860a4aea71bc065ce7b8ea823706d661e21893a640df716aa6e22207a10007d612cd07dc6465b33efd92417d8cba30ffa86febaf70604c3f4602d3a1c463bb5716ede18fc0992fbab7f3a13e7ae3492", 0xad}, {&(0x7f0000000680)="393591397f713923e005274cfd0896df741d1417f13c05d96d376ca2ae4a12175a8aae8d70e7d16525c9f368085c6fd3274133df6a9043a402dd456e8feb62ec25b75a2472d9bd9ec1a8f7b1d7e5c023a7af627467155385ef39c074ee8067fb5c30b32979da87e532f46a0fd4da6d12d56f261b3053d8476b71810579d629d55ac0ef6e40d7df429f13770d3bcaa26444bd79bf566324f09232dcaff35b076e9e9909520523a740d6c10870569d075e799241f6ea44ebc0e43805fc403c9de1d6af53bfb638944e5fb9d2dd8dbad7b34590274a", 0xd4}, {&(0x7f00000003c0)="6a8f1b37767eec3decfb6d94ca2d", 0xe}], 0x4, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0x30}, 0x4000001)
syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00')
openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
r2 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x4, r2)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="04020000130000032abd7000fedbdf252c027f814e244e200500000020000000f7ffffff0900000063a8681b020000000000000007000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x1}, 0xa3d82957d622ce19)
kcmp(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001e00)=ANY=[@ANYBLOB="a0210000130000012abd7000fbdbdf25003800004e214e21ff07000008000000010400003f0000000100ff7f06000000060000005ce90000758b9331083b4294a861981152b9a74af0a397d68eb34a3f76960b554904a759ddfb36594c6086a4ad0c08818b1006bcd48e1415cf113ba0ddaab872567286a922d78dff8e64f5d9c6764df18e38f129b900bf7f47a0c315e53174744321acfa2400e829818e946e090cda788f376d9878115540d8b1eb472b8f40efd86ea741fbd8b63952e032a4491e70b19a6a2eec093ab4aa7b863cc4919673cf7a10490f8062e4eb1e6a17ace606dc0d5ee2695c000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x21a0}}, 0x24008141)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x448000, 0xb4)
preadv(r1, &(0x7f0000001580)=[{&(0x7f0000005800)=""/4118, 0x101a}], 0x25, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)

03:05:44 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 75)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:05:44 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:05:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001740470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:05:44 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2808038, &(0x7f0000000240)=ANY=[])
mknodat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x1, 0x10001)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4)
r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x60000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000200), 0x200, 0x802)
ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381)
openat(r2, &(0x7f00000004c0)='./file0/file0\x00', 0x600100, 0x102)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, '\x00', {0x4}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r6 = openat$incfs(r1, &(0x7f0000000400)='.pending_reads\x00', 0x2, 0x140)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000540)=ANY=[@ANYBLOB="0100100000004cb246"])
openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x124)
creat(&(0x7f00000001c0)='./file0/file0\x00', 0xc1)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000003c0)=0x8)
sendfile(r3, r5, 0x0, 0x100000001)

[ 3181.277095] FAULT_INJECTION: forcing a failure.
[ 3181.277095] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3181.279606] CPU: 0 PID: 17752 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3181.280729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3181.282077] Call Trace:
[ 3181.282518]  dump_stack+0x107/0x167
[ 3181.283114]  should_fail.cold+0x5/0xa
[ 3181.283739]  __alloc_pages_nodemask+0x182/0x600
[ 3181.284498]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3181.285475]  ? lock_downgrade+0x6d0/0x6d0
[ 3181.286149]  ? lock_acquire+0x197/0x470
[ 3181.286816]  alloc_pages_vma+0xbb/0x410
[ 3181.287472]  shmem_alloc_page+0x10f/0x1e0
[ 3181.288147]  ? shmem_init_inode+0x20/0x20
[ 3181.288850]  ? percpu_counter_add_batch+0x8b/0x140
[ 3181.289660]  ? __vm_enough_memory+0x184/0x360
[ 3181.290396]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3181.291286]  ? shmem_unuse_inode+0xf60/0xf60
[ 3181.292020]  shmem_fallocate+0x78a/0xd30
[ 3181.292703]  ? shmem_evict_inode+0xa20/0xa20
[ 3181.293431]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3181.294287]  ? SOFTIRQ_verbose+0x10/0x10
[ 3181.294966]  ? lock_acquire+0x197/0x470
[ 3181.295614]  ? __x64_sys_fallocate+0xcf/0x140
[ 3181.296351]  ? lock_release+0x680/0x680
[ 3181.297014]  ? _cond_resched+0x12/0x80
[ 3181.297659]  ? selinux_file_permission+0x92/0x520
[ 3181.298454]  ? shmem_evict_inode+0xa20/0xa20
[ 3181.299169]  vfs_fallocate+0x48f/0xd00
[ 3181.299810]  __x64_sys_fallocate+0xcf/0x140
[ 3181.300514]  do_syscall_64+0x33/0x40
[ 3181.301129]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3181.301958] RIP: 0033:0x7f04eff10b19
[ 3181.302565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3181.305550] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3181.306797] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3181.307949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3181.309114] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3181.310273] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3181.311430] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:06:03 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84)

03:06:03 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x100820, &(0x7f00000028c0)={[{@gid}]})

03:06:03 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xefee8fcf)

03:06:03 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r7 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x4, &(0x7f0000001600)=[{&(0x7f0000000240)="a951c69cb89f5905c915899d697c310c98f1079d5e75676ae6a9cd02bf5d267e0f123f165cc20c912e67e9346a1cba002ba8036bb471f07fa7290916d7470616b237ba5393ceb99da11dd1db73975b6698ccdd416951dea17ab682964584e700d7", 0x61, 0x7}, {&(0x7f0000000300)="e23b8c811ab8f50bdd6b6e2113491c240b54a5c02011dfb97f23b5195cb9bcf72997530909ca0300185461617ff84f776a9ecb83f1630dc87ba46b8224df7c445b679d5e905c4b5c1b04f77934b96e18bdd0e53088c16f27461914cce4adc341eab6cb59631e6bf81606258a147b0d124aa552f32ef6ed904eb8cb0bfd870059d4a961c21b3acd15c1595d264292e7928d6f57916511de5b30f1e3f7d4993c944ad5f02f2c8400d7f24db334aa8d62c8e892190c875a265d6000ee820a6c1aca0fcb7d8f92244021e2d566bc4afa4742784eb87c39aeb82d0f01673697c8615e", 0xe0, 0x2}, {&(0x7f0000000500)="612b8c6269c7717b201028e07c263d0008ca14b9af5c5f796355fb21f516a7b65fc7a3ccffdf3c9ae0f33c1c83ab4449a184c0d63564f7a11a43089fa56259610605a897b82bf7a1ee4114cdd6df41b7e53369e323f3e7067c4a2a42ca7e76c21f53d583fdc037e953913c1c823dfc0e29d47608a4e107c85991ed73583b67f112743d1b25b866379ab231f803edb65a7be981b886d6c6e5a5723c06900058008e2b1489b0140e488208f56d69119b2af37453c6fd4e276ea884fefbd88d9c27acc9d556205220ee70c666704780e428f08e2cec2f34a58384eda2824fe0ae9750ac7f59020b7abb89b5e87a0e3123c2993fd117e82b9dc0125130274abf401e989b5477c018021b24ec15bb272602cc60b3f1281b092076453699c64af8574a99fad1b21724c4c95f0c23fee1523d25c57207b929c2ebcdc847dc7187a065447449872b8aa7557648444c1f76ed686f133dc0fb2a87e494430b13f0406d3aa750b110ab4d74d1888132ccc1884e65769a94a696d66c0f18cb8f1ebe363b3307eb9542971cedfe2bd4ae36ad93691b2070362a5678de745e6032063b01cef0b773d04be3377f263d4f443dc0f8f40e207b339796ae909052a4eaa653fdc65cf745f76bcdfbb7bc402c786a2e8499fcc36ec6dea13bcd1561d92692bfd365ebdd3ef6b4b600ab41b8ce294095b046ce3ee609788b57890bd4903317aa9649fe3883f39df8597a122f4e81a9c18d5b9e9b4e897e4b4b5a549766f9dd44e8ab27d9bfad6626d3a96ce95fd84fa64da41eb5ab99e954bd843f8ed82b89b39106935e089bd9c404230a2d46170059ab3558925375b1bec25308b3b2c954e5e7e1a3ca9ba0a029c29c0304a46bec8f167d6d4372646abf07acee34de7c54c2d72f04c53e3d60a6751206ef0b08aba2697b84d48cab6b77fc148f186edc4edc10ecca212518cde2816f7f629f75ffdc1a4385d6eadcb36ed61e85a2887a87083e6fb72d7351b69456e67ae4e4e0062991fad486ccbb0010af027f16d119ebc26aeb8a0f38ace20359a204b0140a1e96ad8ac067c6c0af3b8dc790e72b0a30d19509465c6afa9329a065d28edc85a080bb3173f1add7b99a4681e9bbb34c7d814e29834a6524e09e9e6b48c45ecc6924c4ccd31768eb99955a792cf0d7015a9e87fb3c6f612af3eb603840c844c1a698e4b4c82c9ed9b2c1efa1e41c7e763e4b19eb54f12da8ed71d7c56f2ca0c7847c0ceaae047d8cc8bb33e313483a3e3236886ec8073e441782e4cb754e41017b36151555ca3746f6896860dfcf37e8793242cec0f81d14d6f61f518bd85dbafcc4c9785cde5fe614f86a6603c26eb2653f4955ebd688fb8801e3a8a707d5553b0f56a4e651c11ae88c0166fe4573039f3d64c402bf1c0e521dfead2e54c508c77f2b850bfb4662035ae1cd0065e21a4520649e41333712a3e7bab305e02b68ca28c6a32ac28f019041ba31b8777883d99e461729b8e919a4b55103c115331e7b011b4becf21143c51c6cb4cd21ebf08c3d8ab0aa120e1ca299419c31fa1918970ae4553a2278dab64b756b0cd0fc5b6b3ce1e2ed4c203bd20c3b02d1329e2737cba6b787a37bacf339cb2c5cd5267e0c6c2733c36db1e3b39c649fcd72208ae57fdba72373a12799d407245a4e79cbb50c3ca8735d65100afbad728d26e6374224689b61146eced2994927053da1b1a0e3a66d42f77eff10d7956d6ba82e5a417bbdb7985d3af3bb90add2dd85842a17133e5b69258f22c05d9e07560a4d1fa508b8e8988e6b88854f318dc59c3013e4d76bf6a73114144585c96130a0dae1f75f64ea752c10eb80790640568d5ab27109987dd19e144696e72734169d577fac6a981a9ef573ea2953b7d11a932f1fe0e6eca55a249ef3461ebe7064e12c09863ac74a1871d2bd582f61d1835c0549e92d142bb1a51d0b0356b148fae9559cdc266e54d49b23d9d5198e25bd857f1ba986f52a02ecc75c4a92a514f1baa18fa2d139fb4b2c584a790e15918fa4747a286c7b1716859e9413f90d47ed9f0f1f6399c004d5123718d1fa9c918f0b9c24825b10bd8d8fbc5b40aa5eb854a605252eaccd5571bf8447ba43baa9b5a5e76091cae986bfd7a15276a05b23201e87ff602c289325a16b85ab29bd7ed68df2c752e8d778e1b6a2427ea5a0bd6622572dd8ad4fc8d40618280cafebcd239f52402141b44fc0fd2898ec6422ad482ce396c2c7ad7ecf93b8fcd2974d257989a0f6bc102e9bdaba04c6072801e525e09bf69e0b6cf8a0a087a24d28ecbfd646fc722aead9097e508376a412e366b1afc5d072afd13eee41a6ad4cbd8869bf736c2e3a233e970cbeb4c88f271d503af1a3fa1dc4d1e11d13308d78b6467236dcab2ecd2d81e30e5949fbe4baaa478ca9bc0b850dc2b63a8e5f54df89641917e9fb7a5c457cae50f54d09250dfc6ec32e33d4f029139761083baf950cd7bb8e7a24119256e091c222a338e41fe2871bd630cde06d710df960fe3a277dc4b6719ae93c0b9cd59cf18bb17581589c4ba4bcc535ecba84398c4f8475dbc8cca5fb07d4f7117f1b92bf530528ffa21c567651fa94bcdff84dacfaf1e3299a36ff33cc56faa9012216a35eb5795a719fa330c7a946ff75f8c72945428a1539b6c68256f37fcd0902132ab4b4cc2717891d5fb128f3d18ed54e368e3b04f0aa5339f30c6236d90a2da3dc02873d9574f19e0717f21898d33ddd8d80a8de1c46f938e3691083e10a692b06bb0676ac3627ab5462e6316895789a54e117a12a458c2ea391f3a6389939735c579a63ab90d15f026c86d7a1ca9a514974cf2323b333baf3424adc5ae5541583296586413a20c875300ac7e2cb512bbd1b6d1d46f9b0712c905059395b84879297f4123334c4b25581ba4dd6cca0aaae28a4836f1eea2b5741e14891fc7811c849abc5203a81214c002d03a4dfd48c52449bc06bba4bd1fc5eb18c5ea565b8244e4d678484bd561dbbcbb627d29547b70ee461a218f07531238ffb2ed7eed97dcc87c12fb6f71ce9d983cc2d1dd2d61943ddc17b12e5adbcb1f1493586dd954c5e27286812589b66d7a225fd8689fd3695ff59d4e29a6b28a80eaf29c76e17979147b0061d2c1e187f60ae8f4d030acc8d5e549f98f5fdf151d4101c419ef6ead857bcb40dac3ede6962655509d827b50205e72134fa91d26f9bc1fae062a70ffe3d5e4a40046dab963d67a12bc77128b3b6dd3d88ad57a5205ed7f464af6085061652d8f1413c1be89bd666fb12bf16f2ecd49c984ddb9b50fc1692527bf1a0fc32c9916c8cad5a8a15d271a494d91a04f840d1f7f50f9b7012c059857096aff67c7fdf4d4167a72c2b91f9d0b35e18238874e4493b2ff106f8d752fd6f86d3698465ba3e639532f7587bb6b2107b2902426389fb5bf224bed1954b49b0922a1f6bdd6397695bffb646ad282ed489903d4250c29e118c67bcd24c26209d2c5bec0e59cb7386ca32d1ee0e25218e985dda1b5ceabce4af750cff2db891602dbf8059856c29b655af1a45a69ff190d58525dc48660747a04a419f3c7083acb4293c409a5b12d201a8c587339438bdf027b8dc59a54378e7d7bb1a1e710a57cd2d2f2a6214643302b98b52c66c6cfe04419ca741986420e4ce0e8fd46f9f6f6e17b15598656df7504821289ee12ca3c5666f1f557dc4267fefa46770b8c5ba17027f8a3a7bf1bf6b3fa638f58caab02eb21c13c3798fbf6ef7f88665ed7e5745f60c36bca8a9fb91b0ab53cea3f3a81eae77edf484a46abbd6143fe9782ec4d8c4d4c7629e0a1da8f352c176741fd502d6c5dfd697af6965bab042a5538ee6f9d7dda5c6d580f52f473372f91fbb68553b404eb071bbe9b8edc2cd1de513fb0b64e59b4b13e1d8ce88f9d82d4b8a687a719c42d49851d67206a0637a2d7c87dc33ad4e445abfa2ad77ed669dc2f980e34a2996147df67efbaab775b0fb035055826f68e376d26291663869a96c7415235b8b84cafb0a6225548e9c6f080b63e9dc99585b4f44a2fe4d3174e5de47c725711c9876cc5fffcabfe4e3237e43d3b3c3a3ce6a958132d1162d0b089b7f37e3cbb95cc8c32949648b9d7e2d5a3b0a3635c96febb5baccda5792ceed60003d6e37e2e1d254f68596e2acc2e6211ee5481ae0417e601051c445ece7b18e0c07deddbd159859941ab91805121afbe4b684f85345be24d9161192e5423c7506ecfe1c60518a0f11afe7353f0ac5f78e413bbebfa508eed5511caf463d83d0f58e250da64924466fd3fd8d5a8e2376fb1c9299dc7aa66c01add5294d4e8ca80206171a75fe11e36c4b0a6a49398cbd6026dcd05883618804c1b1cd98c59ad2899bad2f9ecb529f5b81d89d6665223acda2d4a4b510f0f3b25f123f9a353b6199e0e80fb9e1bf6397e4ed3fed6de4688bfcf061b1b7f4899f61a8904718775b3c34fb6ba0fd73ad0e690a8d304c7c13f34d6412f61c712df62b03f0de64eb9a59404cd2dc0a0750d59f9be8e6673e8cd06f541f8d7a46404c47ceb80a4aa313c5e44cb73a36be4387904168ad5d9f7748240a5d68f8918a18ff5a5f51fb9ec5ac1368a10c17be4ee4470d09184a30bacc4ce20b531cfa330aa25f93890eaeb99fadf0b2abb329ac58902730ef30b6b194ce52fad508e82f6417c64f4ed002434bfdf35878b31155d56767866cf2a21a8efbdef4c03cd391d99b923ddc43584725b5611c1e09f51d71bdae739ab5aaadce940093cae9de33782909d17593b1aca2471371e689a842ca2466b3a31463b8e87514955dfd3b7e06455bdaa68a30dee96f461af8c635eb079a0b5f05f8137bac91b66ad3837445109fd042f7d9b8f02816a8ef97c0187b901c80918c4d6df7fd421de52b38594bf3d4edcc5ccb458554f5e071b80446a53f1706b29b2ec9e7e778a7f085a4cb407559a76e73b6f81eae2cefc4ba30bbbad47d8bf8dd7e55dad0e2483110f7cc781bbf9ea0d805ab31f83b84c5ec2571f1b9a1840c55702fcd9ee7c7d1f42a133afe1dd61417a0bfc2b973ab0f0f6e627c491d30cc6269cbe7f9d0f6469d37d8ea6ce6f94dc9a867a8078d183e464a4be540c1d1d248a23ae789617420c227f7ca6e8d6df5b11d859f3bf3a2a7dcee304e0775b663609909acc934e1efeb8df5aaef9f4eb3012fbd65beff9089946ee1a8ca10afa51332489004c53f9e9d5a4e3aacb967a424a0ca9c1759c054362622cfc6e83d36a819148593fdba5d0087b4cadaa25b1ac7c8ae06d7e651d6c6ea9cf030e013da394133d08244579228ac8de507e7a74eca138a051be2e447edf952daa980e6d7bbf0c9ec6c123fe6e12b5db2e5d76e695dc918ae1b1db4253b1748a117b6a8840816927ca04c5a11403265be38875a8f56f983f5b1ea9e0107b26d9bca40858471b61708e6c4d01407a0f97b7ca47c81c7012f77fa6272025e5b85bc327aef1297fa6234f4ea986b5b417e5688a0545ae0f65bd994791420d4ecd4505b96be5c2667ce1a6e8eee77b0c41e9465cec5053462dd55aabc8d59a3fde2ca115726baa5a34a4c619df351c56800bb435d4e8ce86c7a6e4665e25ea79277bff75b2c015acf4d993117ed8a3d15599bf8d0bab3c959c6b6cda66fa1e7a8ca7eef4055ff2e2b80967cec7cafd40269a2358bbaba656a1f1d3fc85f4f585e9795801346ad46dd8f3696d14db7ca613e627a79c2ddb173e1f2021402d6a7f9a6eece6669fbb6cac015f13802df5d95633b750483054f4d9ce67281be121586d8a5d53f39f6be20e16a6e58db24a6", 0x1000, 0xffffffffffff7fff}, {&(0x7f0000001500)="c534d6888b44c35bcdf9089c5aff1ddb0059439382fa2ad4a07cd01ac718432b5a6f78af8491cd3237f70dacaacb10c4f9c05b4b084ae726d36e32abd5fce529878d1a9efde6124168b1959a276fff4ad725a0032a917be84fb10ba5f0630c4c52d979dc3a9b114d407c142f962e225303d0ba85a4869f5de64d6450dd1ee06f898dd3bec9796d636011af341a4dd3058febae965b2edd53b91e3df3562eec913f960d76101db6aa33b2e431ceecaefa23e27f67fca9a798434ee7b76b4d1179a690572684dded31054bb7b06af7c5f974f0bd7202", 0xd5, 0x2}], 0x0, &(0x7f0000001680)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@mode={'mode', 0x3d, 0x1000}}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '{.'}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x63, 0x61, 0x31, 0x39, 0x31, 0x39, 0x37], 0x2d, [0x61, 0x37, 0x65, 0x37], 0x2d, [0x37, 0x31, 0x65, 0x66], 0x2d, [0x32, 0x36, 0x64, 0xbd461c4c0e8551b5], 0x2d, [0x64, 0x6a, 0x36, 0x32, 0x61, 0x31, 0x39, 0x34]}}}]})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r11 = io_uring_setup(0x20f1, &(0x7f0000000200))
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0xa, 0x0, r12)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r9, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r12}}, 0x7)
syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x20, &(0x7f00000000c0)=[r0, r4, r6, r7, r4, r4, r8, r4], 0x8, 0x0, 0x0, {0x0, r12}}, 0x14ed)

03:06:03 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:03 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 76)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:03 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2}, 0x10088, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x0, 0x27f})
open_by_handle_at(r1, &(0x7f0000000000)=@xfs={0x1c, 0x81, {0x1, 0x1, 0x1, 0x1}}, 0x200400)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1a)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5fb3, 0x0, 0x0, 0x3de}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(r0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e6360041000800e32e0000cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce9f69506f65fc3feb2256df4c61766ec22dd8396f76e85ed8d3035aa2c23e6c22e307db44700f8885091ba978fbdad6e124ba2bc1e9df5de27d4bbec230e10d7d02503affba990ecae803cc671d201a75596398225f4f4bcf3d5b72d09c88a214bfe07b082b5ffca5776cbbcf8f2b64c41e71decf350a8a8b9b70ec95df34b3fcc383ea5cec439fa77eb27905c2272dbd9baefd9b233b257473542c3745d26909cb65f1f175817b6d218cf9a035e1ebae98b77f9ef"], 0x54, 0x1)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
dup2(0xffffffffffffffff, r4)
r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$KDENABIO(r0, 0x4b36)
fcntl$setpipe(r2, 0x407, 0xffff)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)

03:06:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380017a0470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3200.053799] FAULT_INJECTION: forcing a failure.
[ 3200.053799] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3200.055889] CPU: 1 PID: 17768 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3200.056926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3200.058176] Call Trace:
[ 3200.058582]  dump_stack+0x107/0x167
[ 3200.059127]  should_fail.cold+0x5/0xa
[ 3200.059711]  __alloc_pages_nodemask+0x182/0x600
[ 3200.060416]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3200.061329]  ? lock_downgrade+0x6d0/0x6d0
[ 3200.061949]  ? lock_acquire+0x197/0x470
[ 3200.062576]  alloc_pages_vma+0xbb/0x410
[ 3200.063188]  shmem_alloc_page+0x10f/0x1e0
[ 3200.063820]  ? shmem_init_inode+0x20/0x20
[ 3200.064477]  ? percpu_counter_add_batch+0x8b/0x140
[ 3200.065235]  ? __vm_enough_memory+0x184/0x360
[ 3200.065923]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3200.066752]  ? shmem_unuse_inode+0xf60/0xf60
[ 3200.067429]  shmem_fallocate+0x78a/0xd30
[ 3200.068066]  ? shmem_evict_inode+0xa20/0xa20
[ 3200.068735]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3200.069522]  ? SOFTIRQ_verbose+0x10/0x10
[ 3200.070154]  ? lock_acquire+0x197/0x470
[ 3200.070756]  ? __x64_sys_fallocate+0xcf/0x140
[ 3200.071433]  ? lock_release+0x680/0x680
[ 3200.072040]  ? _cond_resched+0x12/0x80
[ 3200.072647]  ? selinux_file_permission+0x92/0x520
[ 3200.073383]  ? shmem_evict_inode+0xa20/0xa20
[ 3200.074040]  vfs_fallocate+0x48f/0xd00
[ 3200.074645]  __x64_sys_fallocate+0xcf/0x140
[ 3200.075287]  do_syscall_64+0x33/0x40
[ 3200.075851]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3200.076624] RIP: 0033:0x7f04eff10b19
[ 3200.077192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3200.079930] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3200.081062] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3200.082127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3200.083185] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3200.084240] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3200.085305] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:06:03 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r4=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=<r5=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000540)={{}, r5, 0x0, @unused=[0x400, 0xef99, 0x94, 0x8], @devid})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080))
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x45, 0xfc, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1004, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

[ 3200.186651] FAULT_INJECTION: forcing a failure.
[ 3200.186651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3200.188467] CPU: 1 PID: 17770 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3200.189509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3200.190738] Call Trace:
[ 3200.191146]  dump_stack+0x107/0x167
[ 3200.191698]  should_fail.cold+0x5/0xa
[ 3200.192282]  _copy_from_user+0x2e/0x1b0
[ 3200.192884]  __copy_msghdr_from_user+0x91/0x4b0
[ 3200.193592]  ? __ia32_sys_shutdown+0x80/0x80
[ 3200.194260]  ? SOFTIRQ_verbose+0x10/0x10
[ 3200.194872]  ? lock_downgrade+0x6d0/0x6d0
[ 3200.195512]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3200.196187]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3200.196974]  ? find_held_lock+0x2c/0x110
[ 3200.197598]  ? __is_insn_slot_addr+0x123/0x290
[ 3200.198294]  io_recvmsg+0xae8/0xd70
[ 3200.198845]  ? lock_chain_count+0x20/0x20
[ 3200.199466]  ? io_sendmsg+0x830/0x830
[ 3200.200038]  ? lock_chain_count+0x20/0x20
[ 3200.200664]  ? lock_chain_count+0x20/0x20
[ 3200.201295]  ? mark_lock+0xf5/0x2df0
[ 3200.201863]  ? register_lock_class+0xbb/0x17b0
[ 3200.202541]  ? arch_stack_walk+0x99/0xf0
[ 3200.203155]  ? lock_chain_count+0x20/0x20
[ 3200.203786]  ? __lock_acquire+0xbb1/0x5b00
[ 3200.204452]  ? __lock_acquire+0xbb1/0x5b00
[ 3200.205098]  io_issue_sqe+0x3bd6/0x7700
[ 3200.205706]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3200.206491]  ? SOFTIRQ_verbose+0x10/0x10
[ 3200.207102]  ? percpu_ref_put_many+0x153/0x2b0
[ 3200.207789]  ? io_connect+0x610/0x610
[ 3200.208364]  ? lock_acquire+0x197/0x470
[ 3200.208959]  ? find_held_lock+0x2c/0x110
[ 3200.209582]  ? __fget_files+0x26d/0x4c0
[ 3200.210180]  ? lock_downgrade+0x6d0/0x6d0
[ 3200.210811]  __io_queue_sqe+0x90/0x9d0
[ 3200.211408]  ? io_issue_sqe+0x7700/0x7700
[ 3200.212049]  io_submit_sqes+0x4461/0x85c0
[ 3200.212702]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3200.213456]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3200.214180]  ? lock_downgrade+0x6d0/0x6d0
[ 3200.214798]  ? find_held_lock+0x2c/0x110
[ 3200.215418]  ? io_submit_sqes+0x85c0/0x85c0
[ 3200.216075]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3200.216803]  ? wait_for_completion_io+0x270/0x270
[ 3200.217534]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3200.218229]  ? vfs_write+0x354/0xa70
[ 3200.218789]  ? fput_many+0x2f/0x1a0
[ 3200.219340]  ? ksys_write+0x1a9/0x260
[ 3200.219912]  ? __ia32_sys_read+0xb0/0xb0
[ 3200.220522]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3200.221314]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3200.222083]  do_syscall_64+0x33/0x40
[ 3200.222643]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3200.223401] RIP: 0033:0x7fb2ae3d8b19
[ 3200.223963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3200.226651] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3200.227785] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3200.228840] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3200.229902] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3200.230951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3200.232008] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:06:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000570000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:04 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 77)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:04 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x200, 0x3, 0x81})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup(r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r5, 0x325, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x400, 0x70bd2d, 0x80, {{}, {@void, @val={0xc, 0x99, {0x0, 0x16}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x880)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x24, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

03:06:04 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85)

03:06:04 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xfeffffff)

[ 3200.459065] FAULT_INJECTION: forcing a failure.
[ 3200.459065] name fail_page_alloc, interval 1, probability 0, space 0, times 0
03:06:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000670000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3200.461136] CPU: 1 PID: 17806 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3200.462293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3200.463504] Call Trace:
[ 3200.463903]  dump_stack+0x107/0x167
[ 3200.464443]  should_fail.cold+0x5/0xa
[ 3200.465010]  __alloc_pages_nodemask+0x182/0x600
[ 3200.465711]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3200.466586]  ? lock_downgrade+0x6d0/0x6d0
[ 3200.467193]  ? lock_acquire+0x197/0x470
[ 3200.467796]  alloc_pages_vma+0xbb/0x410
[ 3200.468389]  shmem_alloc_page+0x10f/0x1e0
[ 3200.468995]  ? shmem_init_inode+0x20/0x20
[ 3200.469645]  ? percpu_counter_add_batch+0x8b/0x140
[ 3200.470377]  ? __vm_enough_memory+0x184/0x360
[ 3200.471044]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3200.471844]  ? shmem_unuse_inode+0xf60/0xf60
[ 3200.472514]  shmem_fallocate+0x78a/0xd30
[ 3200.473131]  ? shmem_evict_inode+0xa20/0xa20
[ 3200.473788]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3200.474558]  ? SOFTIRQ_verbose+0x10/0x10
[ 3200.475171]  ? lock_acquire+0x197/0x470
[ 3200.475759]  ? __x64_sys_fallocate+0xcf/0x140
[ 3200.476422]  ? lock_release+0x680/0x680
[ 3200.477008]  ? _cond_resched+0x12/0x80
[ 3200.477602]  ? selinux_file_permission+0x92/0x520
[ 3200.478326]  ? shmem_evict_inode+0xa20/0xa20
[ 3200.478972]  vfs_fallocate+0x48f/0xd00
[ 3200.479562]  __x64_sys_fallocate+0xcf/0x140
[ 3200.480196]  do_syscall_64+0x33/0x40
[ 3200.480754]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3200.481518] RIP: 0033:0x7f04eff10b19
[ 3200.482069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3200.484707] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3200.485822] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3200.486859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3200.487899] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3200.488938] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3200.489980] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:06:04 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000770000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:04 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r1)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x9)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="0d9f0154e43e8a31e5e16f07fa9540e7e00353d83b401a736f0bf0bc9f5c0000000000000000", @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRES16=r2, @ANYRES32=r3])
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
flock(r5, 0x6)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x916f0e0b00d1ab96)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'})
unshare(0x48020200)

03:06:04 executing program 7:
r0 = open(0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8937, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd, 0xff, 0x0, 0x1, 0x4, 0x1}, 0x7)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5d5a79dc469dc1d673fe073b2f92d2be485a039d76d43ed237efa37e715432062a3fbadc0a984da894717559c3f7c27389abe8ae6c17a36b323a0a0268", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x494}, 0x1, 0x0, 0x0, 0x4}, 0x55)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
lseek(0xffffffffffffffff, 0x800, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2300}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
syz_io_uring_setup(0x64da, &(0x7f0000000100)={0x0, 0xd8de, 0x0, 0x3, 0x3a, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000001c0))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x9347)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, 0x0, 0x400001, 0x7a)
sendfile(r4, r3, 0x0, 0x9bbb)

[ 3200.579663] FAULT_INJECTION: forcing a failure.
[ 3200.579663] name failslab, interval 1, probability 0, space 0, times 0
[ 3200.581457] CPU: 1 PID: 17812 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3200.582487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3200.583699] Call Trace:
[ 3200.584098]  dump_stack+0x107/0x167
[ 3200.584647]  should_fail.cold+0x5/0xa
[ 3200.585224]  ? create_object.isra.0+0x3a/0xa20
[ 3200.585906]  should_failslab+0x5/0x20
[ 3200.586476]  kmem_cache_alloc+0x5b/0x310
[ 3200.587078]  ? mark_held_locks+0x9e/0xe0
[ 3200.587688]  create_object.isra.0+0x3a/0xa20
[ 3200.588344]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3200.589103]  kmem_cache_alloc_bulk+0x168/0x320
[ 3200.589808]  io_submit_sqes+0x6f76/0x85c0
[ 3200.590460]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3200.591205]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3200.591926]  ? lock_downgrade+0x6d0/0x6d0
[ 3200.592542]  ? find_held_lock+0x2c/0x110
[ 3200.593151]  ? io_submit_sqes+0x85c0/0x85c0
[ 3200.593814]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3200.594513]  ? wait_for_completion_io+0x270/0x270
[ 3200.595212]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3200.595891]  ? vfs_write+0x354/0xa70
[ 3200.596438]  ? fput_many+0x2f/0x1a0
[ 3200.596975]  ? ksys_write+0x1a9/0x260
[ 3200.597554]  ? __ia32_sys_read+0xb0/0xb0
[ 3200.598160]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3200.598927]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3200.599686]  do_syscall_64+0x33/0x40
[ 3200.600239]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3200.600990] RIP: 0033:0x7fb2ae3d8b19
[ 3200.601554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3200.604221] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3200.605355] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3200.606405] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3200.607459] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3200.608516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3200.609586] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:06:19 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 78)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:19 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = signalfd4(r0, &(0x7f0000000300)={[0x1e73]}, 0x8, 0x40000)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000340)=0xa4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_setup(0x12d4, &(0x7f0000000140)={0x0, 0x5719, 0x10, 0x1, 0x5f, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, 0x1}, 0x435a)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x18ae, 0x3, 0x0, 0x0, 0x0)

03:06:19 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000f70000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:19 executing program 7:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
dup3(0xffffffffffffffff, r0, 0x80000)
r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7362736563746f723d3078303030303030303030303030303030302c00e1c8e4efe9a921b17748fe077a5084a093fe11249622ab353d4620594cc327b792b8ed2daa1c6922538d261a01"])
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x82307201, &(0x7f0000000300))
openat(r2, &(0x7f0000000040)='./file1\x00', 0x105080, 0x0)
r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x82307201, &(0x7f0000000300))
openat(r3, &(0x7f0000000040)='./file1\x00', 0x105080, 0x0)
r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x100)
ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x1, 0x6})
renameat(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00')
fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x1)

03:06:19 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xfffffffe)

03:06:19 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86)

03:06:19 executing program 1:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r0, r1+10000000}, {0x77359400}}, &(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xef)
close(r2)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)

[ 3215.785583] FAULT_INJECTION: forcing a failure.
[ 3215.785583] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3215.787708] CPU: 1 PID: 17851 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3215.788736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3215.789994] Call Trace:
[ 3215.790394]  dump_stack+0x107/0x167
[ 3215.790941]  should_fail.cold+0x5/0xa
[ 3215.791518]  __alloc_pages_nodemask+0x182/0x600
[ 3215.792220]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3215.793102]  ? lock_downgrade+0x6d0/0x6d0
[ 3215.793731]  ? lock_acquire+0x197/0x470
[ 3215.794341]  alloc_pages_vma+0xbb/0x410
[ 3215.794941]  shmem_alloc_page+0x10f/0x1e0
[ 3215.795559]  ? shmem_init_inode+0x20/0x20
[ 3215.796178]  ? percpu_counter_add_batch+0x8b/0x140
[ 3215.796912]  ? __vm_enough_memory+0x184/0x360
[ 3215.797600]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3215.798411]  ? shmem_unuse_inode+0xf60/0xf60
[ 3215.799081]  shmem_fallocate+0x78a/0xd30
[ 3215.799708]  ? shmem_evict_inode+0xa20/0xa20
[ 3215.800361]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3215.801136]  ? SOFTIRQ_verbose+0x10/0x10
[ 3215.801764]  ? lock_acquire+0x197/0x470
[ 3215.802337]  ? __x64_sys_fallocate+0xcf/0x140
[ 3215.803006]  ? lock_release+0x680/0x680
[ 3215.803595]  ? _cond_resched+0x12/0x80
[ 3215.804186]  ? selinux_file_permission+0x92/0x520
[ 3215.804909]  ? shmem_evict_inode+0xa20/0xa20
[ 3215.805569]  vfs_fallocate+0x48f/0xd00
[ 3215.806159]  __x64_sys_fallocate+0xcf/0x140
[ 3215.806802]  do_syscall_64+0x33/0x40
[ 3215.807356]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3215.808111] RIP: 0033:0x7f04eff10b19
[ 3215.808669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3215.811358] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3215.812482] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3215.813531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3215.814565] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3215.815599] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3215.816637] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3215.821657] FAULT_INJECTION: forcing a failure.
[ 3215.821657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3215.823363] CPU: 1 PID: 17844 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3215.824375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3215.825583] Call Trace:
[ 3215.825973]  dump_stack+0x107/0x167
[ 3215.826510]  should_fail.cold+0x5/0xa
[ 3215.827077]  _copy_from_user+0x2e/0x1b0
[ 3215.827671]  __copy_msghdr_from_user+0x91/0x4b0
[ 3215.828355]  ? __ia32_sys_shutdown+0x80/0x80
[ 3215.829006]  ? mark_held_locks+0x9e/0xe0
[ 3215.829635]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3215.830293]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3215.831082]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3215.831867]  ? io_recvmsg+0xb8/0xd70
[ 3215.832399]  io_recvmsg+0xae8/0xd70
[ 3215.832938]  ? lock_chain_count+0x20/0x20
[ 3215.833554]  ? io_sendmsg+0x830/0x830
[ 3215.834122]  ? mark_lock+0xf5/0x2df0
[ 3215.834672]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3215.835438]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3215.836227]  ? lock_chain_count+0x20/0x20
[ 3215.836831]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3215.837627]  ? mark_lock+0xf5/0x2df0
[ 3215.838181]  ? lock_chain_count+0x20/0x20
[ 3215.838807]  ? __lock_acquire+0xbb1/0x5b00
[ 3215.839441]  io_issue_sqe+0x3bd6/0x7700
[ 3215.840044]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3215.840824]  ? SOFTIRQ_verbose+0x10/0x10
[ 3215.841451]  ? io_connect+0x610/0x610
[ 3215.842026]  ? lock_acquire+0x197/0x470
[ 3215.842625]  ? find_held_lock+0x2c/0x110
[ 3215.843240]  ? __fget_files+0x26d/0x4c0
[ 3215.843836]  ? lock_downgrade+0x6d0/0x6d0
[ 3215.844502]  __io_queue_sqe+0x90/0x9d0
[ 3215.845114]  ? io_issue_sqe+0x7700/0x7700
[ 3215.845834]  io_submit_sqes+0x4461/0x85c0
[ 3215.846484]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3215.847213]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3215.847928]  ? lock_downgrade+0x6d0/0x6d0
[ 3215.848539]  ? find_held_lock+0x2c/0x110
[ 3215.849144]  ? io_submit_sqes+0x85c0/0x85c0
[ 3215.849805]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3215.850522]  ? wait_for_completion_io+0x270/0x270
[ 3215.851236]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3215.851917]  ? vfs_write+0x354/0xa70
[ 3215.852472]  ? fput_many+0x2f/0x1a0
[ 3215.853018]  ? ksys_write+0x1a9/0x260
[ 3215.853594]  ? __ia32_sys_read+0xb0/0xb0
[ 3215.854200]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3215.854968]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3215.855734]  do_syscall_64+0x33/0x40
[ 3215.856287]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3215.857039] RIP: 0033:0x7fb2ae3d8b19
[ 3215.857608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3215.860255] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3215.861373] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3215.862403] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3215.863430] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3215.864461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3215.865501] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:06:19 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 79)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001001270000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:19 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87)

03:06:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0)
dup2(r0, r1)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)

[ 3216.079816] FAULT_INJECTION: forcing a failure.
[ 3216.079816] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3216.082567] CPU: 0 PID: 17874 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3216.083718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3216.085091] Call Trace:
[ 3216.085572]  dump_stack+0x107/0x167
[ 3216.086210]  should_fail.cold+0x5/0xa
[ 3216.086890]  __alloc_pages_nodemask+0x182/0x600
[ 3216.087679]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3216.088650] FAULT_INJECTION: forcing a failure.
[ 3216.088650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3216.088704]  ? lock_downgrade+0x6d0/0x6d0
[ 3216.088732]  ? lock_acquire+0x197/0x470
[ 3216.091792]  alloc_pages_vma+0xbb/0x410
[ 3216.092500]  shmem_alloc_page+0x10f/0x1e0
[ 3216.093195]  ? shmem_init_inode+0x20/0x20
[ 3216.093952]  ? percpu_counter_add_batch+0x8b/0x140
[ 3216.094800]  ? __vm_enough_memory+0x184/0x360
[ 3216.095586]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3216.096531]  ? shmem_unuse_inode+0xf60/0xf60
[ 3216.097278]  shmem_fallocate+0x78a/0xd30
[ 3216.098034]  ? shmem_evict_inode+0xa20/0xa20
[ 3216.098795]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3216.099690]  ? SOFTIRQ_verbose+0x10/0x10
[ 3216.100387]  ? lock_acquire+0x197/0x470
[ 3216.101073]  ? __x64_sys_fallocate+0xcf/0x140
[ 3216.101864]  ? lock_release+0x680/0x680
[ 3216.102545]  ? _cond_resched+0x12/0x80
[ 3216.103231]  ? selinux_file_permission+0x92/0x520
[ 3216.104085]  ? shmem_evict_inode+0xa20/0xa20
[ 3216.104861]  vfs_fallocate+0x48f/0xd00
[ 3216.105547]  __x64_sys_fallocate+0xcf/0x140
[ 3216.106298]  do_syscall_64+0x33/0x40
[ 3216.106939]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3216.107827] RIP: 0033:0x7f04eff10b19
[ 3216.108477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3216.111643] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3216.112927] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3216.114174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3216.115405] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3216.116639] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3216.117875] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3216.119135] CPU: 1 PID: 17876 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3216.120172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3216.121395] Call Trace:
[ 3216.121797]  dump_stack+0x107/0x167
[ 3216.122338]  should_fail.cold+0x5/0xa
[ 3216.122920]  _copy_from_user+0x2e/0x1b0
[ 3216.123519]  __copy_msghdr_from_user+0x91/0x4b0
[ 3216.124207]  ? __ia32_sys_shutdown+0x80/0x80
[ 3216.124873]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3216.125661]  ? SOFTIRQ_verbose+0x10/0x10
[ 3216.126271]  ? lock_downgrade+0x6d0/0x6d0
[ 3216.126898]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3216.127564]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3216.128344]  ? find_held_lock+0x2c/0x110
[ 3216.128962]  ? __is_insn_slot_addr+0x123/0x290
[ 3216.129649]  io_recvmsg+0xae8/0xd70
[ 3216.130195]  ? mark_lock+0xf5/0x2df0
[ 3216.130746]  ? io_sendmsg+0x830/0x830
[ 3216.131312]  ? __is_insn_slot_addr+0x14c/0x290
[ 3216.131986]  ? lock_chain_count+0x20/0x20
[ 3216.132603]  ? mark_lock+0xf5/0x2df0
[ 3216.133158]  ? register_lock_class+0xbb/0x17b0
[ 3216.133842]  ? arch_stack_walk+0x99/0xf0
[ 3216.134435]  ? lock_chain_count+0x20/0x20
[ 3216.135051]  ? is_dynamic_key+0x1e0/0x1e0
[ 3216.135672]  ? lock_chain_count+0x20/0x20
[ 3216.136296]  ? __lock_acquire+0x1657/0x5b00
[ 3216.136946]  ? __lock_acquire+0xbb1/0x5b00
[ 3216.137622]  io_issue_sqe+0x3bd6/0x7700
[ 3216.138216]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3216.138981]  ? SOFTIRQ_verbose+0x10/0x10
[ 3216.139577]  ? lock_chain_count+0x20/0x20
[ 3216.140188]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3216.140954]  ? io_connect+0x610/0x610
[ 3216.141526]  ? lock_acquire+0x197/0x470
[ 3216.142108]  ? find_held_lock+0x2c/0x110
[ 3216.142707]  ? __fget_files+0x26d/0x4c0
[ 3216.143292]  ? lock_downgrade+0x6d0/0x6d0
[ 3216.143907]  __io_queue_sqe+0x90/0x9d0
[ 3216.144489]  ? io_issue_sqe+0x7700/0x7700
[ 3216.145115]  io_submit_sqes+0x4461/0x85c0
[ 3216.145763]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3216.146496]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3216.147208]  ? lock_downgrade+0x6d0/0x6d0
[ 3216.147814]  ? find_held_lock+0x2c/0x110
[ 3216.148423]  ? io_submit_sqes+0x85c0/0x85c0
[ 3216.149067]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3216.149784]  ? wait_for_completion_io+0x270/0x270
[ 3216.150493]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3216.151175]  ? vfs_write+0x354/0xa70
[ 3216.151727]  ? fput_many+0x2f/0x1a0
[ 3216.152263]  ? ksys_write+0x1a9/0x260
[ 3216.152821]  ? __ia32_sys_read+0xb0/0xb0
[ 3216.153428]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3216.154192]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3216.154956]  do_syscall_64+0x33/0x40
[ 3216.155508]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3216.156259] RIP: 0033:0x7fb2ae3d8b19
[ 3216.156803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3216.159459] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3216.160568] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3216.161618] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3216.162656] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3216.163696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3216.164739] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:06:19 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x1000000000000)

03:06:19 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001d00210c0000000000000000050002000c000a8008000000", @ANYRES32=0x0, @ANYBLOB="89a11be162f592709dc18d64175e48d0b82e682a90feb5939d507eabe8a9e09b3d86d2d3aee9e445750ba74136494a5b978cfbab0277c99e6e9821333fccb947e9e2c746ac20d6409a1cea376c68d3d96ca3da56e9bd7aa9e3e38bceda24fb6c4e0ec2af63d5f9579d3f5b25603e11d4dc6559f735ddefe2c725224499fb69b2232fda5214bff52cbb0d1b400101"], 0x20}}, 0x0)

03:06:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001001470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3216.272788] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
03:06:19 executing program 2:
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x0, @unused=[0x0, 0xfffffffffffffffa, 0x101, 0xfffffffffffffffc], @devid})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "0ee339cb26f062d17f898c7a001ca30b"})
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x1000000, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = syz_io_uring_setup(0x4b3d, &(0x7f0000000040)={0x0, 0x763d, 0x0, 0x0, 0xfffff}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
fork()
r6 = creat(&(0x7f0000000380)='./file0\x00', 0x2)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x34, 0x7, 0xd6, 0xf6, 0x0, 0x1ff, 0x400, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x7f, 0x1}, 0x1420, 0xfd, 0x64ef1115, 0x0, 0x410c6a61, 0x0, 0x2, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x7, r6, 0x8)
r7 = getpgrp(0x0)
pidfd_open(r7, 0x0)
syz_open_procfs(r7, &(0x7f0000000040)='net/xfrm_stat\x00')
accept(r4, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000240)=0x80)
syz_open_procfs(r7, &(0x7f0000000080)='net/udplite\x00')
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x73, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x8014, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2528, 0x6, @perf_config_ext={0x2, 0x1}, 0x20, 0x1, 0x1, 0x0, 0xffffffff, 0x1, 0x7f, 0x0, 0x5, 0x0, 0x100000001}, r7, 0x7, r0, 0x9)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3232.441208] FAULT_INJECTION: forcing a failure.
[ 3232.441208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3232.443449] CPU: 1 PID: 17923 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3232.444474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3232.445711] Call Trace:
[ 3232.446118]  dump_stack+0x107/0x167
[ 3232.446678]  should_fail.cold+0x5/0xa
[ 3232.447266]  _copy_from_user+0x2e/0x1b0
[ 3232.447878]  __copy_msghdr_from_user+0x91/0x4b0
[ 3232.448579]  ? __ia32_sys_shutdown+0x80/0x80
[ 3232.449251]  ? mark_held_locks+0x9e/0xe0
[ 3232.449889]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3232.450563]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3232.451374]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3232.452194]  io_recvmsg+0xae8/0xd70
[ 3232.452747]  ? lock_chain_count+0x20/0x20
[ 3232.453374]  ? io_sendmsg+0x830/0x830
[ 3232.453948]  ? mark_lock+0xf5/0x2df0
[ 3232.454522]  ? mark_lock+0xf5/0x2df0
[ 3232.455089]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3232.455866]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3232.456670]  ? lock_chain_count+0x20/0x20
[ 3232.457294]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3232.458108]  ? __lock_acquire+0xbb1/0x5b00
[ 3232.458774]  ? __lock_acquire+0xbb1/0x5b00
[ 3232.459420]  io_issue_sqe+0x3bd6/0x7700
[ 3232.460032]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3232.460808]  ? SOFTIRQ_verbose+0x10/0x10
[ 3232.461425]  ? percpu_ref_put_many+0x153/0x2b0
[ 3232.462105]  ? io_connect+0x610/0x610
[ 3232.462686]  ? lock_acquire+0x197/0x470
[ 3232.463286]  ? find_held_lock+0x2c/0x110
[ 3232.463903]  ? __fget_files+0x26d/0x4c0
[ 3232.464504]  ? lock_downgrade+0x6d0/0x6d0
[ 3232.465136]  __io_queue_sqe+0x90/0x9d0
[ 3232.465740]  ? io_issue_sqe+0x7700/0x7700
[ 3232.466385]  io_submit_sqes+0x4461/0x85c0
[ 3232.467056]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3232.467796]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3232.468524]  ? lock_downgrade+0x6d0/0x6d0
[ 3232.469142]  ? find_held_lock+0x2c/0x110
[ 3232.469773]  ? io_submit_sqes+0x85c0/0x85c0
[ 3232.470439]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3232.471163]  ? wait_for_completion_io+0x270/0x270
[ 3232.471885]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3232.472582]  ? vfs_write+0x354/0xa70
[ 3232.473143]  ? copy_kernel_to_fpregs+0x9e/0xe0
[ 3232.473838]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 3232.474643]  ? ksys_write+0x1a9/0x260
[ 3232.475213]  ? __ia32_sys_read+0xb0/0xb0
[ 3232.475821]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3232.476598]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3232.477366]  do_syscall_64+0x33/0x40
[ 3232.477920]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3232.478678] RIP: 0033:0x7fb2ae3d8b19
[ 3232.479232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3232.481934] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3232.483055] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3232.484093] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3232.485137] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3232.485925] FAULT_INJECTION: forcing a failure.
[ 3232.485925] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3232.486207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3232.486220] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3232.489621] CPU: 0 PID: 17920 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3232.490343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3232.491190] Call Trace:
[ 3232.491462]  dump_stack+0x107/0x167
[ 3232.491838]  should_fail.cold+0x5/0xa
[ 3232.492232]  __alloc_pages_nodemask+0x182/0x600
[ 3232.492707]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3232.493311]  ? lock_downgrade+0x6d0/0x6d0
[ 3232.493720]  ? lock_acquire+0x197/0x470
[ 3232.494136]  alloc_pages_vma+0xbb/0x410
[ 3232.494554]  shmem_alloc_page+0x10f/0x1e0
[ 3232.494979]  ? shmem_init_inode+0x20/0x20
[ 3232.495422]  ? percpu_counter_add_batch+0x8b/0x140
[ 3232.495923]  ? __vm_enough_memory+0x184/0x360
[ 3232.496355]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3232.496908]  ? shmem_unuse_inode+0xf60/0xf60
[ 3232.497365]  shmem_fallocate+0x78a/0xd30
03:06:36 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 80)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:36 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r1 = syz_io_uring_complete(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="7fb61e6537eb699f3e10ec1cd9adbbacd687629d97907f10852806fc03bc666c52e27a29e450d607d8d03d365b7d3d5e60d08322e23c971bcfa201a27a0c2d693ce36c625731103425038d24f14cbf2ae2fa285c51ac90f4451385b40299d4990a58442aa8b23db3fd16088e11ac7f02ad086a8fc311bbe6b1402189384a3b66aeaafab816813bce1788d8e63cd37958d75992accb696d5540ff4b69b413605959f6a285ec44247ab50734a40df378b221ce88953602efd2d44194e99ff346167523045967c2f13b8a0792d7dc44", 0xce}], 0x1}}], 0x3, 0x8881)
r4 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000340)={'ip6gre0\x00', @broadcast})
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250200000008000700", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="0c0003000200000000000000080008000300000008000900010000000800020001000000221b1727a6f3fe4624d86d804b3c9d9a57068e36b5d454d542b5e54c6d5e3ce6c21012612ebdf760a55cc5e1ec1c0bb0e6a611578d16"], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x20001000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001e00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x0, "645f3bbfdb363e"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={<r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140))
sendmsg$inet6(r3, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

03:06:36 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_setup(0x6aae, &(0x7f0000000040)={0x0, 0x23cb, 0x20, 0x2, 0x2df, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x1}, 0x40)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r7, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
[ 3232.497774]  ? shmem_evict_inode+0xa20/0xa20
[ 3232.498351]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3232.498878]  ? SOFTIRQ_verbose+0x10/0x10
[ 3232.499299]  ? lock_acquire+0x197/0x470
[ 3232.499699]  ? __x64_sys_fallocate+0xcf/0x140
[ 3232.500149]  ? lock_release+0x680/0x680
[ 3232.500610]  ? _cond_resched+0x12/0x80
[ 3232.501004]  ? selinux_file_permission+0x92/0x520
[ 3232.501491]  ? shmem_evict_inode+0xa20/0xa20
[ 3232.501944]  vfs_fallocate+0x48f/0xd00
[ 3232.502340]  __x64_sys_fallocate+0xcf/0x140
[ 3232.502772]  do_syscall_64+0x33/0x40
[ 3232.503144]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3232.503652] RIP: 0033:0x7f04eff10b19
[ 3232.504027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3232.505843] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3232.506604] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3232.507315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3232.508037] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3232.508742] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3232.509449] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x69}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000500)="4c723fbda0ce60152637756536521efadc32ac4ec3bf56912e2da108bed08092929cb7263827ed41312eae46d8cdfd347e1de50a55ca3f7d0041514095aff680e94d3515507029049d69b4ba9a20d73f95f2a7d25a1b99c7ebd7e06fc1c649e7fe56a6063c2502b30fb7f46a4706ee48bfce93282efd4a26fbb662c65c55e1880e7e092da80fd28e89ff162493416fcd74f52d0e3db91d29775d00b2583f1e318e3f3fdecafb4fc7d68627f48d07d31f60925a317ba5c5016e3a4fee31acc88315b16a86e778", 0xc6}, {&(0x7f0000000380)="a8fc4a752dd6fe3ef75378184bcb4a4240768811404eb0bbda9ba1894eca37cba95e4039af822e4a39aa1d77ca9b0722dabbd5b2e7b14f7f50eb90166ddf841d95b7f55d9419d3e54d0b7baab9dae209826f957d30a1d4ff1026585a53a84b439cd7cc347461f0f06b8eba72c768d4449f1cce9c26da3a292c1c7b62a1cebd3825f255d7f0f3510b041adb79c33e580d7787e4f660984c7b9f9d149f415e5f75fa2d1a8f36a3d64cff134ea81a8a80882fb5af", 0xb3}, {&(0x7f0000000600)="c3b08dcaed17960000b9c78a0de0e73f24260f09710d7e0a5ee76930c10d8ef10bbb74db517b8f77e9bab67c80f6ae94a5e615ab8956fd44230dfdf97f33849f6e5c2ee9e71f01200d6d5a30baf8e15ba77cc8526ba1f911732e66832efbc9c158941667d40525b04b04163d3a8290bec403ed345a406a8b3078f11479418692", 0x80}, {&(0x7f0000000680)="a2b329cd901103b179b61b3a3883374b3d14c796dc24461daea4f1bd2f9414ec7f5b7cdd4b5fb0dd7427ce0bb34fd858028b9bba09b78e780a02646d29cf95e5b614951b010da9f683a1e11b092ae5b2a5b3d2b8ab757ff947bdb794b73fc44bc2baa9dad8659082dcbd37145a747f28ed60d3f6d38c8c1703ebeb0fc8357303264c76965cbbae36768e7c8183fee096971fb8571300420a0820bdd66728725b255ae13682a7c89c23cbe1e5ce86", 0xae}, {&(0x7f0000000740)="366d145662c09b253e47409693fb8d1be7af59b154da0167418522cc5f3df05618e569271cc4d0218d0fda696a2585f5fb7a73889a72448b16706a96354ec125a48d234f27a9", 0x46}], 0x5, &(0x7f0000000840)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x87, 0x7, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @jumbo, @enc_lim={0x4, 0x1, 0x3f}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @jumbo={0xc2, 0x4, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x68}}, {{&(0x7f00000008c0)={0xa, 0x4e22, 0x9e, @mcast1, 0x1cd}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="df2fc0c631a296418c586cc8e7342f38e713856ca7ae75785dd06804329dfe8d75a150c8f4228baed63e75074f5374d69fd44a4122d774c6084c26c3c9abdd182e5ac2644683d21fb887f622fc652284b899278cfe6c63ef63333410c68f138628d1e6ef7fad707665bcaf2d46b4d7a8b98a78cac2bb56c913582b770500da2c1040264f1890275b896256130125a575a339d326ed56", 0x96}], 0x2, &(0x7f0000001a00)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x6, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x22}, @empty, @dev={0xfe, 0x80, '\x00', 0xe}]}}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="eacc63597ca45653c6e77e102fc908df3006ece88e0bde16c7a29b5b3aaba67760ae30191804be060501caeae5c707256fd922f75327371a9d91f239e3956755e26b8b90c36e695647464d453ced6a99320a14b0f9f781611c18d78cd550", 0x5e}, {&(0x7f0000002b40)="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", 0xff}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)="ad6aa733cac82bc459fd24eaee4968db04adaa60cb6dffdc05a90fd5dbd3c3b0420e547f1c370dfe33fb1dfba99c24aea0a34306baf8a07d1bfe0f186a3e3a242ad79ab7936c21685fa9cdb9c7cbea05fc211c1aabc5995a10684dd7975dcb3aa975e3927b4486bddcd28388e9eccf1a6920adcb5e0169714ff658ddc1f3589dbbddf31607", 0x85}, {&(0x7f0000002d40)="466a0bcd4711f990eb3b31154ed9c09d764f6a36cc94c72cba5b64ac6dce65dc3b64f1a24aa88188ef4ddd5db0dbcbc9e5e1ebec", 0x34}, {&(0x7f0000002d80)="25a0f80dd38b87ca3ab7a15f0dc2a302cccb08014eb071d0599ce87b93ef1e69bca109c269d22e1c2f64dfc8483799e5b8d1a700cf3eb7b25f5c9cbeb0789a8ec90a8019d26ebe9425de96c8df9a4948dc9c740c428f0473d23bb9ab5403074e27e10aae754ab1340702748231cc2ffafbcadfa046b9ffcc75541667a88b6d0b8e05e8e9904bf7e50b164d0824c96336bb8646ef714468bccecb5e3ec39a39523ddf709164870adf084d1e6ba4afe65280fc5778a89f01be3199e568158cc8fe9f46d765dda7594b9ab543fe3183", 0xce}], 0x7, &(0x7f0000002f00)=[@flowinfo={{0x14, 0x29, 0xb, 0xfff}}], 0x18}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000002f40)="6f68ed8d09304448ebc9a145fe357c392edc9c42d51d28e497987ec602b5dfe0ee4d3050c8318fd7b8cd9e0552c1ff2d172897568c15a6a5d3b3faf4d0e8727e883cf557026209b3d53897b4acc90fea215cbb7bb428cd0cab395943e2369692b880f88c3e76045efa1de1d57fde4af118c786e35a2b6dbea34fc81b9c30bcd38b26a6190888364c1538ad87e93f8fc321e53685973b92205aa3ffdec8c7d92b43e6fd67bb602bf975fd7f66a03484", 0xaf}, {&(0x7f0000003000)="c5c15a46785b68f74ccd0800c360c7e9e3262e7ab939702d16ccef492d0d031457ea8ad05dd186e7e4b15df347787397948f50d795dfad00f22db7e011b1b1769e4389dd20d648d76799c55c6970bed191d29192f6aa68cd2dbaf000f0ad9975650ea923dc09e146da0a92d6ccd9046986112667996d6b5475504a8b9fcbb009b750fd93909140291d945d2f82f385b4e4754aa31c05cb08fa64009d3084771928308917b0e37472afe61fe296a4b14e1616e060959b728875be3484813e134170456a9b27df2ac402c3c16cc678bf3d677ff02db6f589de06697ba9f35fd558f1ae1a5638a81d6fd496037c2fad2cde863f48000dc03c8907dea711ff7210fbb7a4678b9ee3abd55a1b2551ac1e22c72f45da2cb436ef8dd6e296e79b0da9a38558327009bead4269d077444c345b2af66198001b0e068de959348fc076726f61742f979095ac225408945f6c7ebd3f7b872c1a2918bb53edb5a1e925cca67957d8c102d65f6737988cf8b39b2900d754d5a00daae6e8ea94f8753786b32c8566de8ace079a2c9cee5ab95f1767ca504f8eb6db3aeadcdbdf60938fb32e5a80abbed888ea81d3db2a428ee24d9fed65a63161cd5f9cac16b7ae1b9b1bc5814d90eb3409452c33f04f77741465708c44913876fa72dfadc8ca5584c099dda05794f49497d38aa984d2d752ee277b9ccab0f310240a0ee1b42481601267500ae75a3b68150db9fa96ccea153da4b7f30888f51a6be999018daadafa7042c4e6a9ab897148eb5885b8a9721352ba26334fbd8de169bd1ff65bca521006076e1a91b08d9c2b2075b2056cb2210dba035c6fd61dd45b9106932b89f53c18f36aa28300d5cda475910f0721f6b5654aedb68aa085527b3c478c7e0387d526c19f3e57c1dea5fddf31cecd9bf1ebbcaffa4bc015b6b51faeb49a1ec9a53aca11c8dd6993d96cd7b182c14374a5bcfcff71ffeb523c50ce33524f01961a437e8fe71452734f553dd741e286204a85e874202e075fb753cd77b080a841990213e0157944958ecb078bb208ca5c278506b41f9284ccdf98b19c9e92a4e9d27482739f94c4fa390bc1077e80909a4364f6b7189e21fe3a9cfdb07f416f55016e967cb7f9634ef290414b135e03506b46c0e802024d289bb6283e75368c21241c06b2907f25fed8e41911da8ecaf1cdcf3fb4344ca1d1f98eaaec5dffbae413c32080cafe14143da9733e3cdbee47ae46e9371532d1c8db0282db641ee5eab8de5173f4903be2d3f65c3aea89f54f7acc225b1cca34b85adfc10ce6bfb727cf81ac322269ad35444e46b45ad6ef265d05a749cf0859f0c0f395ef6dd6aef9168ee2c9a5eb56c3133f272e9b89e78d8fcedfa88fbe6928145c0023bf2b777f95820c9ca0a595e5e9865a68a34c6f02faf81a7aaa66c9d34b6a06f1678ee82bf0b739350e9f3d42a56882336f7abde677b4c22260043af65b076b5eb494383eb6de7fbb38662f0d3244e12ae37090e7c916d30709fb8a9cc5ed0221f9dc2859d52ce09e895a9742bc3289b3e7f90963741344814f5a2f180ffcee28f28eb24b51e0368fbe1ba6dc390e9c63e6f3cba4fa5168d873d387092fa9930c3fca86c8411e89ae1dbedd5a3a24eeda601dc758fd0a9978a6434ec9c33cb37b304553485f81d49075ae7ac25585ff36bfeb2b6949dc3baf8f9140ca0aa0df4c48865fe46376f811ec52082fbd646927ff75f8a4ae7bd9cf7f2f8cdb168f7c6eba1a8c6f63b58f7ee6e78048ce123c31f28dc7686a523206e761ba4b9b09340f03c116143dc50ae25813f9a340231b89b2ab028de7ecb6ab35faf17a93749bd4827110d82af544a937b3788a4c98dead413bb583c39e53a0ea40c5e66000bb91ab8cb229eadcf6e9814d901968cc78b52ac33850dfdce000300d2676da6ecf27468be2dcd8f686e41614546924d0046da98329f5af48974f2edf1ae17837bf1ba45649cd1391cd1fd2d7227a9a71f4a76a431bf10f02078bb16be6791162626410ed3eec7504bd29f7cb4126addd4e8e0afb3621179e3608dc16807351ff715d3679d03f2d6a5c06aea3a57e747dde1c2836cd0e2b4dad0e44be1ae4323f3fcd45e45fb08300efcd60bb125fd272c966f8b069073c8510ac481b9fda278f1e22f1a9b496ea168454709496ff9ae1be8fe6f2e77419e40fd9eab203b996d513886060a4191ccab55c968bbd05babaa2375e6afe9fa7099ed468a0db8ce74cbc9ed9b8ba4a05cf3af4467f26af6dbb695ede1a8fac220457a04f4a21dc836fbde04412ee28071811ef9f6e50cbde5ca13fa1037259919b19e7e8500ab070902fb902e1c2dfd42f03d0b55dec4d265a61a38c353e12e3e698d71b5c74e7679d92ed83939df01eefa090e548ada3ac9a16495e1a50b300ba850c8327e451239c06401cbc4788014d2ef52483f3b982ed635851011eca909642d0da35add527078a1ee6aeff0e2cb4fbcbcc21195508211aa0eb0d3d5dbb1c789511ae84d69b85eefaac4bf9c9891015865ac3ddf56027c6de0e1d13fd7325c614e6b05ea09f792e061545d64bea12f6fb2bf3e1c11efffc12fd59055395f699358c2267d49536285d51ead96255378784bbe8e9a99e237eae2ba121259c37d6215501cbc1b8a2ca6c20f52ecc722de7b0b448ee61009ff86f8b46a0d615bec346e991e8e33f7a3124b0b1db9c4fd544509b61da56494f3e70f4b765867e27d0ee117b444d4de2ec0c2f3e5f28efd9cf1925ac76dcb3df53bcb1bce37cccfff0d09e0cbf88127bc25cd540f629aa879e9b20d8900922270aafc446b2f7d0989c5cd53e656cf0410908af9acf315b5eb514a8fcaf48461caef56201a00e103440ad36b39a2ab86b852a8e29fab26179456f6153d532b3e913f9f5e36c1067bf18f29cda372ef4d284fc57de5c4167d02b74b88c2ed31e7e96563ce353019898203ab946d814015ecd42f75d0a895384c4faf09e823a475f9d200dbbf215e865e3d0a05bc31139bd456f58df370b3c218b47b5ec0065a37631b15e086948b18106d162b8028537132759d03060bda0cb1a5ad2a797a29de2b18f8eaf5183a5eeaaadf177edc1a305ed1828af026a56b81c166e372bb109b740ca26beeb812d467a1f644689f94b71c097cea0e5ea94ddee8f3eeed89ee4b4ba635f479a87c4c36f87ec2b88019a51e10c9186268727d46952b9c28b8bc652e4953dedacb218f335d1711ce316e6d80a3288fff1befeb1c425f6e35746c4ceb5e444dfddfa6ce786c99746a4f8cfba2a30b63d6b6e5e96b53c759094ba1c572ad5fe76a8ecd7aaa006aa666156daa89d7c053bf180b69463ed5cd29ce1351bffb84f34bbc6a5cb19d5a974751dbf3559496c06847b25fdeb3e947d502338ff9b538c6cddab30023672f7148da0dfd17d47f63553545aa77c32c5447a2185342625b2d684f5b33a00a67d3a7b2cd9c63f037a6811a6ba2d736696db218ce521b418b94ad49ea22cda711739f9e353d42361c0558b5dae14f72e6852a7899844e04bde6f76faa95824d72127d2181816d86b153be4ea5d09140ae8c782d150d8c1d5c3f60ca4aff7c37acefd0fd96db35e14d49c169b8ce80d5b7de7f997f63994bcee6b7bbebdee826232b56c69c2862a8a243a0887810a83a7a12850c620d969ef7768343c06faf28a7bdbfc85fb255fda6fcda8044b8dbf49025aaea773899dff7ea54a02b4f64299a0f6fd544cbb468de24ae61d3feb3b7b287ea72907d32f4f2cd917ec3b3ef08819cbac45f6bdfcf332e9ae457b5c77eefe26e8ab1f7528b92b4a36eced7ae136799d587b7f53761d82bd5fd7797734f045ff74c28b76e64cbe6c7dfa0c9dfe13c159ec5a4a2b910df8f15510c02e74905d189f9d5a858581692a9d3cdfb5e659e76ad7df9dc09db17c3e2c17c5c3b2f77fb8ca70facaa5671b67be89d807b70581d68926d73df1ea84c561625ccb0d31b1f9af1990ae7d85d3bf1e43e2060771a106e14508b6d1635cd456109cac7ec1510a53501d7dea89d2bfc2cd4af09170d22a29ea1701e5fa759df05b10704dab4d0666c3d8e0bb9dc71c80c0f8805f3166e671947f7dbc26fe706448b4791c387df73dc122019f8b6cbf445304c5b4d3c2cc7676e33204e58c97477582f17b6618ae85c89d2192fa69dbd686f01c6322555f7dc253bcf22df51dcbed8150683e08157e8e977f0cc6523d8304a3934cde65ba1d34f8e5c0535342e8a3f7f7dc9290127d245ae57f1d79d69c8613f7a06ca4ebb97f6ed7cd7cb6bd7ff7e45be7ab9d618c5c13c3e550870033df52c6692f31fae4a43639cd1fcf2d0d78b74b6d4de0a2636e478c56aa355964038f363d256babdd03edb30f3eda5e1dcc58d9356fc449907a89e902afd2d3ceff68c0849fe823226c67f6e800c5b6aa1fd65ffb7a3755fc7ac3d9d6a8f082419f52d4ea1ba95de0d37637f58f39deb80ca806dcdc185f7d67ce133aaa917a2e223736db4eede96100484c8cc4c67547c65d886c56fb1293964f4c217b4dc0d44e70747bf641153481eefdfb02c811e02113af65657c0406f04cf1bb70d3401f80e3c3ea08340669ca4ade0cee10395ac2f0df0e755c0ce324072735ec2c6b2f24e2e880f65d3d5774e156d8b107281b17e38be69e928c96d8f59791f8c6edaa6c72c6926149f6dd0baf8ae1680de6d8ac5787b6af2ea6bc701a1d868b8c4d271916b55e2fa7cdfdad99d8994e9b8a69253103c79a3e0b48378872357968789bfc823e331dda9b292d3b279b7feefeeb94c31ab70357b3941c360c5e0367834082268d657c50c07bd3b7b4c45b6e51e59e6b60059c1559767082f4bcc84f57219a13b0777de3faa4861e9f76967ee88acaceb5f72d59413a7f7d33d65e84884292b6eff83f8125fcaa97344697183e1be4bebd20c9fda7d80c62aa9ac21e48d2d8a272e0cc4bee98856e0817bae03789d3f900fc680072c88bcce96979ae558c5f88a5b2d042d282c6570b0cc18473e0b1155d4e99a4e306f4957451428cddae0b3346ad3bfd104fea94e7c5871592db2bbcda049b77c785758bbb5133a590eb7b3fa3651b694bdab456da71dace75f01f11f247ef4125f1589218f6132437117d1cd26f6c85f78ab70f56eeec36e76f7f5869ead17e66f83cf02078227f21de3d5a2d4ae9fd3c57cb56032c2d3074fcf7ce94db451fb32fc3600e5ff9b4d25574d5a8867147f25c6324913297276c24797449203bc773742e70214e486a4de8f38b5255e0507baea27666339b152ea718f1b2692f957d9fc0846edd371a59dd6eb9a8d9ca26dd7b4f435739d4a0d6557bde7e4ff92bc9556799a8b3a9340e59c00ad54eea52627310d858ae2feef61beae7f5fbaee3d569d21279875a8258c1502691548faed864f4f1907619546cfec2bb99ab2a3f03009cdb505798c73513bfefa7e339a1e092cf5397aa616c0053db5b4e19c1284d70e2db8bc79d45fd99d30791e9a52c9899d3ae6bcafe3b404ff508027002f81cd07f4fa04eb5d9e053e245eacb33c75b72a8c7d288850957ce35c411dc7890baad72e9dc8fb97a588e12ac2dc382121d60c99cf95cfa841ef787789c43c47c902ae5d5590b9b0fc269a6b8a766fad7f0a1af550ba03c4755e2ac0e4355ac93e598e4aed46a9a1e55b1cea6562fbaf01151577548ca4b89fff848cebe44ee239c4dfd430020892cc271692b56fb33f3d04f74060f3f3292bfd927760102a82b8ce1f144aeb733b73088d2d9e0357cd3e080010659109f989e3d7f0e465a513787e4", 0x1000}, {&(0x7f0000004000)="5394622645a0349c65f718d8896fa4f30a38cf51090dbfeb0fe4ac696c5fb9bc1159b6f85fdc800e1f5b94aa13c8eee74c4b1126afae30562b8d88328c2e4700ae56dbe94c833bb63d6e124806656714286448b40c10bd4a8642fa4cd0fd6318052e16f5d30ed92a2c46c46a6e034d5ab65e2e6b779f05f41c04a70475f3e1930d8132959b1359e808c8bc07", 0x8c}, {&(0x7f00000040c0)="c44541827f42c110a278e560cf2d92d0cd2d1f5e25933cd9582c53e9eab0eee8db019b0f1a4c8063819c4e6d20d4b165d4427f1dde74cdf055308c", 0x3b}, {&(0x7f0000004100)}, {&(0x7f0000004140)="9747f6503ce5b24b92c3a768febf965558a97f7bb2647acbe15323d92e58577849cc625f497a84430fcbfa72a00470e4912bf9760cf628e811802fb3d7281ed860f46bb7a1241e849591c06e3f2217589c3f46291113e20ed561461f7a44b767ebff4fd2e247d27cbc0230fe7c26417541cfa3d277d6", 0x76}], 0x6, &(0x7f0000004240)=[@rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x1, 0xfa, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}]}}}], 0x50}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000042c0)="8e14f7fb5cc83e7e31ee99499d41d8245fac9149c2818aa416caea01e58c8797db8a791f22d66187acdcd54040d277f464595337772d5a584db6d1bc0d965d9aca78957cf39e2df9ad26", 0x4a}, {&(0x7f0000004340)="cee971abc1cec69d1566ec693319ad1d0c64d6cb9b11a6095ff7f58d194569b4481854cb3692a0ff6127c0a7cf787438bcbedd2cc2136721132ef0d0b3fd00dc4cc9154d3a301a2af1bfdbb56dd6341d7db11a283e618cb7dc20cc7a1ab8896110e34632568a2ffe20518814", 0x6c}, {&(0x7f00000043c0)="ee", 0x1}, {&(0x7f0000004400)="f26f9aa330d8a4bc2707f98fe2b0ff83805214da6de152851c9ad71d614ab4c60b12527b28097ae0a382dff955fb8289d5c0f77c41a36833e8c7842f908fecd4e0a668306b8e46513d7c4d80ffa7fe3a32db6008210c766fd45d7c217c2a6f1f240d026c320e04c65a5439fd49ebf2eeab03eec1d42fe61ed1321ed08c11d0db0c69876a2c4b3b33827afc95277c9aaaf481d6c4e76a3e33edca2bacb3e1c2cb04b943015c3929bfd471fcd6b466469f9a10dd93264b21089705fea639e1", 0xbe}], 0x4, &(0x7f0000004500)=[@dstopts={{0xd8, 0x29, 0x37, {0x5c, 0x17, '\x00', [@generic={0x1, 0xb9, "2e5e22826e9491726d026b20b1fd2ee98fb94df99ebeb030e5fab8b41def4190bf8657ddf3c1d3180cde60f260d0799b8a0009aab184cb53f639dadb1d8068363c3bfc037a5228ff37d2f30283b57068117d0d507ad77b6d2e1b06d13873d39e6b06bd33ca2d996539149f67951e9ae172ff3ea553b64b41bd28cb4f0ad4a43ccca6b7024dd618cefa7f7e7f7ccd40af73ab04db98e2b7f4ba37e20ea4a82ede3d0fc646de1521ae3bd1ab112ecea7ad57f3881d482c9ebf55"}]}}}], 0xd8}}, {{&(0x7f0000004600)={0xa, 0x4e22, 0x43, @remote, 0x8000}, 0x1c, &(0x7f0000004900)=[{&(0x7f0000004640)="70218614c8ed8c05217795020582e7dd3f8abf72e2633cfd222a142fff6a87d3cee46d463f79b0d63f427530ce1d20ececb7ea9130f8bd83761f4faa51c1b06842b8761c6e3a0a22a9f0b85657635f8a27e44a9218c518f3badca2668fb7d5e84eed5e7692a90bb49baf2e2a006bd2722c9bcb6b71969afbac2b4aa45d10316b23dcfd37af3fcb9802aa982ca8ff0f558ce84462388482539b1100f8bd995497a8b31ec375b04adb50f16ba2fe5ef7dbcb30f8bf17f35fc9c713d770d790a60afe20c88a622e7e004e93c44e18e52e1eff51ccd8982dc26ab34130b938cfc1bfb8a48d3427a794b8a3", 0xe9}, {&(0x7f0000004740)="352b857b14664484ead14a7d160c51b647451b4fb81573efcf37caaff80520f59f3f0395becd9da891f25dab292e7a02351387ad3794c3bcbccd552ba92518d6042f51a6a501023dd351498ce2a8c9df5d1959546f66b380b8ad926778f7f61391bcffe3550ce323d050fcd5266234bab2908d1f5f99e021477e0cb88dcbb9368cdbd8dd8054eb04af7483f3d694051ef09309d38b00be2dca5b4141b5da896d26cca5c2dd90de6958603dfa829264e62546bdbf8671e3fd165573c3e45b9858d6b15b27afb4927eb5d680c377dbf1754cb0e2c2", 0xd4}, {&(0x7f0000004840)="d29b3473c800034fd47352e2cf0a35f3bb8ce5e4ef685f10d29e93bcaa8c2d6cd3a9d1a096091f47eeec02fd5a25f2b82d9bbcc52e9a1667e37988e2d0bdd28f0fd4f4a5eebae2b309b9951b341eb395f16e4c050a5f6cb024d13821ba8a780480b6359b8c89673d41", 0x69}, {&(0x7f00000048c0)="a95b72656fcdeb9cfcd90019a1f34c5bf066fa5b449b7b86af76698480b35a94f27ade36434b2d73bb", 0x29}], 0x4, &(0x7f0000004940)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r9}}}, @hopopts={{0x70, 0x29, 0x36, {0xb3, 0xb, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x0, 0x8, [0x5, 0x9, 0x7, 0x6, 0x7, 0xffffffff, 0xff, 0x2]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2d}, @enc_lim={0x4, 0x1, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x800}}], 0xb0}}], 0x6, 0x40000)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:06:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001002e70000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:36 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x4000000000000)

03:06:36 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88)

03:06:36 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0xb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:36 executing program 1:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000400)='./file0\x00', 0xc044, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x5451, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='schedstat\x00')
preadv(r1, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000001900), 0x401, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mount$bind(&(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000700), 0xb60092, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x0, 0xa6)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000880)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x992181, 0x0)
open_tree(r3, &(0x7f00000000c0)='./file0/file0\x00', 0x8100)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000100)=0x1)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0xa102, 0x1e1, 0x10}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffffffff)
socket$inet_udp(0x2, 0x2, 0x0)

03:06:36 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0xc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:36 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup2(r0, 0xffffffffffffffff)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r1, 0x0, 0x0)

03:06:36 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 81)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001003f70000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3232.678045] FAULT_INJECTION: forcing a failure.
[ 3232.678045] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3232.680199] CPU: 1 PID: 17945 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3232.681361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3232.682637] Call Trace:
[ 3232.683063]  dump_stack+0x107/0x167
[ 3232.683636]  should_fail.cold+0x5/0xa
[ 3232.684244]  __alloc_pages_nodemask+0x182/0x600
[ 3232.684970]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3232.685905]  ? lock_downgrade+0x6d0/0x6d0
[ 3232.686550]  ? lock_acquire+0x197/0x470
[ 3232.687191]  alloc_pages_vma+0xbb/0x410
[ 3232.687822]  shmem_alloc_page+0x10f/0x1e0
[ 3232.688466]  ? shmem_init_inode+0x20/0x20
[ 3232.689137]  ? percpu_counter_add_batch+0x8b/0x140
[ 3232.689909]  ? __vm_enough_memory+0x184/0x360
[ 3232.690615]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3232.691466]  ? shmem_unuse_inode+0xf60/0xf60
[ 3232.692163]  shmem_fallocate+0x78a/0xd30
[ 3232.692950]  ? shmem_evict_inode+0xa20/0xa20
[ 3232.693677]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3232.694649]  ? SOFTIRQ_verbose+0x10/0x10
[ 3232.695331]  ? lock_acquire+0x197/0x470
[ 3232.696062]  ? __x64_sys_fallocate+0xcf/0x140
[ 3232.696737]  ? lock_release+0x680/0x680
[ 3232.697333]  ? _cond_resched+0x12/0x80
[ 3232.698098]  ? selinux_file_permission+0x92/0x520
[ 3232.698830]  ? shmem_evict_inode+0xa20/0xa20
[ 3232.699663]  vfs_fallocate+0x48f/0xd00
[ 3232.700263]  __x64_sys_fallocate+0xcf/0x140
[ 3232.701081]  do_syscall_64+0x33/0x40
[ 3232.701701]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3232.702460] RIP: 0033:0x7f04eff10b19
[ 3232.703021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3232.705701] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3232.706828] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3232.707877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3232.708927] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3232.709988] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3232.711037] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:06:49 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f644a9c9d11c995813e0ac1080"])

03:06:49 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 82)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:06:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000270000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:49 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000040)='net/netfilter\x00')
r6 = syz_open_procfs(r4, &(0x7f0000000080)='net/udplite\x00')
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3f, 0xfa, 0x40, 0x5, 0x0, 0xfffffffffffffff9, 0x800, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x50440, 0x1, 0x1, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x401}, r4, 0xffffffffffffffff, r7, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x24100, 0x26)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x795}}, './file0\x00'})
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1ff, 0x1}, 0xe)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000001c0)=<r9=>0x0)
sendmsg$nl_generic(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="e40000002c00100029bd7000fbdbdf2509000000fb5a5f71223277b26b72968ddebb19d3110c0b48a0b74e66e2ad392bcd69286088b104e2af0ccfab095c4fbb89adaab6f81fe0dbd8a219abb5cd62c0f33c8645a9c7daa8765830d08bdb813e5aa97bd70af7f961a0c4b1f8c694d130b5cd67420b6c005b9733dbf060e787cfb7b68931c78ecad6f90e873dca04041f1c2fc55c2b504cac458e8c525fc319bd0c004e8008006200", @ANYRES32=r9, @ANYBLOB="35008f801d951ebcf3d12703a88104651f90644870cce5a4f23412d075bf4d82e76fa76c5145e0152a7ecf73801bd60a74146eb3ec000000"], 0xe4}, 0x1, 0x0, 0x0, 0x24000004}, 0x80)
syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:06:49 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x14}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:06:49 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89)

03:06:49 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x100000000000000)

03:06:49 executing program 7:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4, 0x10000)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'netdevsim0\x00', {}, 0x400})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x2, 0x4)
shutdown(r0, 0x1)

[ 3245.816805] FAULT_INJECTION: forcing a failure.
[ 3245.816805] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3245.819073] CPU: 0 PID: 17958 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3245.820215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3245.821583] Call Trace:
[ 3245.822036]  dump_stack+0x107/0x167
[ 3245.822645]  should_fail.cold+0x5/0xa
[ 3245.823280]  __alloc_pages_nodemask+0x182/0x600
[ 3245.823741] FAULT_INJECTION: forcing a failure.
[ 3245.823741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3245.824052]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3245.824077]  ? lock_downgrade+0x6d0/0x6d0
[ 3245.826805]  ? lock_acquire+0x197/0x470
[ 3245.827479]  alloc_pages_vma+0xbb/0x410
[ 3245.828130]  shmem_alloc_page+0x10f/0x1e0
[ 3245.828811]  ? shmem_init_inode+0x20/0x20
[ 3245.829514]  ? percpu_counter_add_batch+0x8b/0x140
[ 3245.830325]  ? __vm_enough_memory+0x184/0x360
[ 3245.831066]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3245.831959]  ? shmem_unuse_inode+0xf60/0xf60
[ 3245.832695]  shmem_fallocate+0x78a/0xd30
[ 3245.833375]  ? shmem_evict_inode+0xa20/0xa20
[ 3245.834105]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3245.834960]  ? SOFTIRQ_verbose+0x10/0x10
[ 3245.835640]  ? lock_acquire+0x197/0x470
[ 3245.836301]  ? __x64_sys_fallocate+0xcf/0x140
[ 3245.837043]  ? lock_release+0x680/0x680
[ 3245.837689]  ? _cond_resched+0x12/0x80
[ 3245.838348]  ? selinux_file_permission+0x92/0x520
[ 3245.839139]  ? shmem_evict_inode+0xa20/0xa20
[ 3245.839856]  vfs_fallocate+0x48f/0xd00
[ 3245.840500]  __x64_sys_fallocate+0xcf/0x140
[ 3245.841197]  do_syscall_64+0x33/0x40
[ 3245.841816]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3245.842644] RIP: 0033:0x7f04eff10b19
[ 3245.843246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3245.846203] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3245.847432] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3245.848583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3245.849741] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3245.850896] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3245.852048] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3245.853239] CPU: 1 PID: 17973 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3245.853920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3245.854692] Call Trace:
[ 3245.854955]  dump_stack+0x107/0x167
[ 3245.855299]  should_fail.cold+0x5/0xa
[ 3245.855669]  _copy_from_user+0x2e/0x1b0
[ 3245.856055]  __copy_msghdr_from_user+0x91/0x4b0
[ 3245.856496]  ? __ia32_sys_shutdown+0x80/0x80
[ 3245.856937]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3245.857368]  ? find_held_lock+0x2c/0x110
[ 3245.857756]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3245.858252]  ? lock_chain_count+0x20/0x20
[ 3245.858644]  ? __is_insn_slot_addr+0x123/0x290
[ 3245.859077]  ? lock_downgrade+0x6d0/0x6d0
[ 3245.859476]  io_recvmsg+0xae8/0xd70
[ 3245.859822]  ? lock_chain_count+0x20/0x20
[ 3245.860217]  ? io_sendmsg+0x830/0x830
[ 3245.860581]  ? mark_lock+0xf5/0x2df0
[ 3245.860942]  ? lock_chain_count+0x20/0x20
[ 3245.861338]  ? __lock_acquire+0xbb1/0x5b00
[ 3245.861756]  ? __lock_acquire+0xbb1/0x5b00
[ 3245.862160]  io_issue_sqe+0x3bd6/0x7700
[ 3245.862539]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3245.863036]  ? SOFTIRQ_verbose+0x10/0x10
[ 3245.863429]  ? percpu_ref_put_many+0x153/0x2b0
[ 3245.863856]  ? io_connect+0x610/0x610
[ 3245.864221]  ? lock_acquire+0x197/0x470
[ 3245.864594]  ? find_held_lock+0x2c/0x110
[ 3245.864982]  ? __fget_files+0x26d/0x4c0
[ 3245.865359]  ? lock_downgrade+0x6d0/0x6d0
[ 3245.865756]  __io_queue_sqe+0x90/0x9d0
[ 3245.866132]  ? io_issue_sqe+0x7700/0x7700
[ 3245.866534]  io_submit_sqes+0x4461/0x85c0
[ 3245.866948]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3245.867415]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3245.867866]  ? lock_downgrade+0x6d0/0x6d0
[ 3245.868258]  ? find_held_lock+0x2c/0x110
[ 3245.868647]  ? io_submit_sqes+0x85c0/0x85c0
[ 3245.869061]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3245.869523]  ? wait_for_completion_io+0x270/0x270
[ 3245.869986]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3245.870437]  ? vfs_write+0x354/0xa70
[ 3245.870788]  ? fput_many+0x2f/0x1a0
[ 3245.871137]  ? ksys_write+0x1a9/0x260
[ 3245.871496]  ? __ia32_sys_read+0xb0/0xb0
[ 3245.871883]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3245.872372]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3245.872858]  do_syscall_64+0x33/0x40
[ 3245.873206]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3245.873684] RIP: 0033:0x7fb2ae3d8b19
[ 3245.874041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3245.875731] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3245.876439] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3245.877099] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3245.877764] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3245.878423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3245.879084] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:06:49 executing program 1:
r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x3)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f0000000400)=ANY=[@ANYBLOB="00fb2a0305e90a778c76633ed20000003d0402a20e174c9be604aec55cff9112ef2d822a"], 0x2a, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27)
fallocate(r2, 0x2, 0x2, 0x6985)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xfffff4b7, 0xb6, 0x401]}, &(0x7f00000001c0)=0x44)
sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef)
timerfd_create(0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000ecbd2b900da00", @ANYRES16=r4, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/unix\x00')
timerfd_create(0x0, 0x0)
unshare(0x48020200)

03:06:49 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r3, 0x80104592, &(0x7f00000001c0)=[0x0, 0xfdfdffff])
ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000200)=0x1)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x24040)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r5, 0x80104592, &(0x7f00000001c0)=[0x0, 0xfdfdffff])
sendfile(r4, r5, &(0x7f0000000180)=0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r6=>0x0})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14)
sendfile(r1, r0, 0x0, 0x500000001)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
syz_open_procfs(0x0, 0x0)

03:06:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000370000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:06:49 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 83)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3246.006015] FAULT_INJECTION: forcing a failure.
[ 3246.006015] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3246.008364] CPU: 0 PID: 17987 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3246.009491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3246.010848] Call Trace:
[ 3246.011287]  dump_stack+0x107/0x167
[ 3246.011885]  should_fail.cold+0x5/0xa
[ 3246.012518]  __alloc_pages_nodemask+0x182/0x600
[ 3246.013279]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3246.014270]  ? lock_downgrade+0x6d0/0x6d0
[ 3246.014958]  ? lock_acquire+0x197/0x470
[ 3246.015630]  alloc_pages_vma+0xbb/0x410
[ 3246.016286]  shmem_alloc_page+0x10f/0x1e0
[ 3246.016961]  ? shmem_init_inode+0x20/0x20
[ 3246.017662]  ? percpu_counter_add_batch+0x8b/0x140
[ 3246.018465]  ? __vm_enough_memory+0x184/0x360
[ 3246.019199]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3246.020074]  ? shmem_unuse_inode+0xf60/0xf60
[ 3246.020815]  shmem_fallocate+0x78a/0xd30
[ 3246.021490]  ? shmem_evict_inode+0xa20/0xa20
[ 3246.022223]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3246.023068]  ? SOFTIRQ_verbose+0x10/0x10
[ 3246.023751]  ? lock_acquire+0x197/0x470
[ 3246.024389]  ? __x64_sys_fallocate+0xcf/0x140
[ 3246.025125]  ? lock_release+0x680/0x680
[ 3246.025772]  ? _cond_resched+0x12/0x80
[ 3246.026412]  ? selinux_file_permission+0x92/0x520
[ 3246.027189]  ? shmem_evict_inode+0xa20/0xa20
[ 3246.027911]  vfs_fallocate+0x48f/0xd00
[ 3246.028550]  __x64_sys_fallocate+0xcf/0x140
[ 3246.029253]  do_syscall_64+0x33/0x40
[ 3246.029864]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3246.030703] RIP: 0033:0x7f04eff10b19
[ 3246.031300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3246.034291] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3246.035504] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3246.036654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3246.037821] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3246.038977] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3246.040140] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:06:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000570000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:03 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 84)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000670000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:03 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x82307201, &(0x7f0000000300))
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x105080, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r8 = io_uring_setup(0x20f1, &(0x7f0000000200))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r6, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r9}}, 0x7)
syz_io_uring_submit(r5, r3, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0xc, 0x8000, 0x12345, {0x0, r9}}, 0x81)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:07:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0)
r2 = syz_io_uring_complete(0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x31d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/1465], 0x744)
sendfile(r0, r3, 0x0, 0x20d315)

03:07:03 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x22}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:03 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
fsmount(r2, 0x0, 0x8)
dup2(r3, r2)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r4, 0x3, 0x6, 0x9, 0x1})
write$P9_RLOPEN(r0, &(0x7f0000000280)={0x18, 0xd, 0xfffe, {{0x2, 0x4, 0x8}, 0x1f}}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x81, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x80, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0xa38b, 0x0, 0x3f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
stat(0x0, &(0x7f00000001c0))
close(0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x4)
mknodat$loop(r5, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0)

03:07:03 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90)

03:07:03 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x200000000000000)

[ 3259.495702] FAULT_INJECTION: forcing a failure.
[ 3259.495702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3259.497037] CPU: 0 PID: 18012 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3259.497697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3259.498469] Call Trace:
[ 3259.498733]  dump_stack+0x107/0x167
[ 3259.499077]  should_fail.cold+0x5/0xa
[ 3259.499439]  _copy_from_user+0x2e/0x1b0
[ 3259.499816]  __copy_msghdr_from_user+0x91/0x4b0
[ 3259.500259]  ? __ia32_sys_shutdown+0x80/0x80
[ 3259.500697]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3259.501122]  ? find_held_lock+0x2c/0x110
[ 3259.501511]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3259.502022]  ? lock_chain_count+0x20/0x20
[ 3259.502420]  ? __is_insn_slot_addr+0x123/0x290
[ 3259.502847]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.503244]  io_recvmsg+0xae8/0xd70
[ 3259.503594]  ? lock_chain_count+0x20/0x20
[ 3259.503979]  ? io_sendmsg+0x830/0x830
[ 3259.504336]  ? lock_chain_count+0x20/0x20
[ 3259.504727]  ? mark_lock+0xf5/0x2df0
[ 3259.505075]  ? lock_chain_count+0x20/0x20
[ 3259.505468]  ? __lock_acquire+0xbb1/0x5b00
[ 3259.505921]  ? __lock_acquire+0xbb1/0x5b00
[ 3259.506325]  io_issue_sqe+0x3bd6/0x7700
[ 3259.506699]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3259.507187]  ? SOFTIRQ_verbose+0x10/0x10
[ 3259.507573]  ? percpu_ref_put_many+0x153/0x2b0
[ 3259.507995]  ? io_connect+0x610/0x610
[ 3259.508353]  ? lock_acquire+0x197/0x470
[ 3259.508720]  ? find_held_lock+0x2c/0x110
[ 3259.509102]  ? __fget_files+0x26d/0x4c0
[ 3259.509478]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.509871]  __io_queue_sqe+0x90/0x9d0
[ 3259.510242]  ? io_issue_sqe+0x7700/0x7700
[ 3259.510646]  io_submit_sqes+0x4461/0x85c0
[ 3259.511050]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3259.511522]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3259.511953] FAULT_INJECTION: forcing a failure.
[ 3259.511953] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3259.513031]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.513422]  ? find_held_lock+0x2c/0x110
[ 3259.513801]  ? io_submit_sqes+0x85c0/0x85c0
[ 3259.514212]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3259.514669]  ? wait_for_completion_io+0x270/0x270
[ 3259.515115]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3259.515553]  ? vfs_write+0x354/0xa70
[ 3259.515899]  ? fput_many+0x2f/0x1a0
[ 3259.516240]  ? ksys_write+0x1a9/0x260
[ 3259.516599]  ? __ia32_sys_read+0xb0/0xb0
[ 3259.516980]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3259.517474]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3259.517959]  do_syscall_64+0x33/0x40
[ 3259.518307]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3259.518783] RIP: 0033:0x7fb2ae3d8b19
[ 3259.519131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3259.520820] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3259.521531] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3259.522189] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3259.522853] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3259.523519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3259.524174] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3259.524864] CPU: 1 PID: 18019 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3259.525942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3259.527179] Call Trace:
[ 3259.527597]  dump_stack+0x107/0x167
[ 3259.528153]  should_fail.cold+0x5/0xa
[ 3259.528737]  __alloc_pages_nodemask+0x182/0x600
[ 3259.529448]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3259.530358]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.530985]  ? lock_acquire+0x197/0x470
[ 3259.531611]  alloc_pages_vma+0xbb/0x410
[ 3259.532220]  shmem_alloc_page+0x10f/0x1e0
[ 3259.532845]  ? shmem_init_inode+0x20/0x20
[ 3259.533505]  ? percpu_counter_add_batch+0x8b/0x140
[ 3259.534262]  ? __vm_enough_memory+0x184/0x360
[ 3259.534948]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3259.535774]  ? shmem_unuse_inode+0xf60/0xf60
[ 3259.536457]  shmem_fallocate+0x78a/0xd30
[ 3259.537088]  ? shmem_evict_inode+0xa20/0xa20
[ 3259.537753]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3259.538729]  ? SOFTIRQ_verbose+0x10/0x10
[ 3259.539419]  ? lock_acquire+0x197/0x470
[ 3259.540160]  ? __x64_sys_fallocate+0xcf/0x140
[ 3259.540847]  ? lock_release+0x680/0x680
[ 3259.541585]  ? _cond_resched+0x12/0x80
[ 3259.542257]  ? selinux_file_permission+0x92/0x520
[ 3259.542997]  ? shmem_evict_inode+0xa20/0xa20
[ 3259.543669]  vfs_fallocate+0x48f/0xd00
[ 3259.544271]  __x64_sys_fallocate+0xcf/0x140
[ 3259.544929]  do_syscall_64+0x33/0x40
[ 3259.545496]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3259.546271] RIP: 0033:0x7f04eff10b19
[ 3259.546847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3259.549556] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3259.550702] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3259.551760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3259.552829] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3259.553918] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3259.554987] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:07:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0xe, 0x1, 0x0, 0x25dfdbfe, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x12'}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x4004011)
r1 = dup2(0xffffffffffffffff, r0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2902df1280786a0c803d5ff4", @ANYRES16=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x28048}, 0x80)

03:07:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000770000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:03 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xff000000}}, './file0\x00'})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:07:03 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 85)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3259.703615] FAULT_INJECTION: forcing a failure.
[ 3259.703615] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3259.704768] CPU: 0 PID: 18036 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3259.705375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3259.706121] Call Trace:
[ 3259.706361]  dump_stack+0x107/0x167
[ 3259.706687]  should_fail.cold+0x5/0xa
[ 3259.707028]  __alloc_pages_nodemask+0x182/0x600
[ 3259.707446]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3259.707975]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.708352]  ? lock_acquire+0x197/0x470
[ 3259.708722]  alloc_pages_vma+0xbb/0x410
[ 3259.709083]  shmem_alloc_page+0x10f/0x1e0
[ 3259.709449]  ? shmem_init_inode+0x20/0x20
[ 3259.709838]  ? percpu_counter_add_batch+0x8b/0x140
[ 3259.710280]  ? __vm_enough_memory+0x184/0x360
[ 3259.710686]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3259.711168]  ? shmem_unuse_inode+0xf60/0xf60
[ 3259.711573]  shmem_fallocate+0x78a/0xd30
[ 3259.711953]  ? shmem_evict_inode+0xa20/0xa20
[ 3259.712344]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3259.712817]  ? SOFTIRQ_verbose+0x10/0x10
[ 3259.713191]  ? lock_acquire+0x197/0x470
[ 3259.713558]  ? __x64_sys_fallocate+0xcf/0x140
[ 3259.713971]  ? lock_release+0x680/0x680
03:07:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000f70000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3259.714326]  ? _cond_resched+0x12/0x80
[ 3259.714793]  ? selinux_file_permission+0x92/0x520
[ 3259.715223]  ? shmem_evict_inode+0xa20/0xa20
[ 3259.715610]  vfs_fallocate+0x48f/0xd00
[ 3259.715954]  __x64_sys_fallocate+0xcf/0x140
[ 3259.716344]  do_syscall_64+0x33/0x40
[ 3259.716675]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3259.717120] RIP: 0033:0x7f04eff10b19
[ 3259.717451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3259.719070] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3259.719736] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3259.720362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3259.720991] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3259.721618] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3259.722258] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:07:03 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91)

03:07:03 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 86)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:03 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x1)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
fallocate(r1, 0x2, 0x869, 0xedf3)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 3259.820938] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
03:07:03 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x0, 0x8884}, @val={0x1, 0x0, 0x101, 0x4, 0x6, 0x7}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local}}, 0x42)
syz_emit_ethernet(0x6b, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x3, 0xab034d45cf8fe248, "9bc974b0cfb9bc3be926864a3a055b4654e54da71613c04c8dd90dbf5d2eafafa0987e98b5872629803426c1d24847453fc8a4f1ba2e35ce37f93c603e1ddb9787c4b6d14685f83e3d24bee8f5ec07426d425c4dbf6a"}}}}, &(0x7f0000000440)={0x1, 0x3, [0x4e, 0x9c0, 0xb39, 0xa06]})
syz_emit_ethernet(0x241, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @dccp={{0x4b, 0x4, 0x0, 0x37, 0x233, 0x66, 0x0, 0x81, 0x21, 0x0, @local, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0x12, "1603b954efd6f888d200d511fd873c2d"}, {0x1, 0x12, "d20a6255f5cd297633183b44683cdb97"}]}, @timestamp={0x44, 0x2c, 0x48, 0x0, 0x9, [0x7, 0xffffff42, 0x9, 0x6, 0x4cc, 0x44b, 0x9, 0x3f, 0x4, 0xe1]}, @generic={0x7, 0x6, "0c05887e"}, @timestamp_addr={0x44, 0x24, 0xd2, 0x1, 0x5, [{@multicast2, 0x4}, {@multicast1, 0xd4d}, {@empty, 0x7f}, {@loopback, 0x7fffffff}]}, @generic={0x82, 0x10, "fa354fd0452088d123790f20704d"}, @timestamp_prespec={0x44, 0xc, 0x98, 0x3, 0xc, [{@private=0xa010101, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xd1, 0x1, 0x1, [{@remote, 0x9}, {@loopback, 0x7f}, {@loopback, 0xe8}]}, @timestamp_prespec={0x44, 0x44, 0x2d, 0x3, 0x6, [{@loopback, 0x2}, {@empty, 0x28a2}, {@private=0xa010100, 0x2}, {@private=0xa010102, 0x31a}, {@broadcast, 0xace1}, {@remote, 0x3}, {@empty, 0xa2d}, {@remote, 0xffff}]}, @lsrr={0x83, 0x17, 0x3d, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x18}, @loopback]}, @timestamp={0x44, 0x4, 0xe3, 0x0, 0x4}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x8, 0x0, 0x0, 0x9, 0x1, "907b6a", 0x5, "a81b93"}, "ea018f3552b368c3dbec9a63c8ac1d69979564dda37f68938f99db5a6ac7f356d76e8ef35ab24852a4a9939fb2b988563975a76e0e2bb66f4702f558e8d476d1f2d503d201f2ea950d0606ad89559b19df72a09a3600d2d32dee54d39949c5cdbc63fdcb77f17c5177ebb3b779af72c7e1afc779312d3154eb4b27c68f20916c6d3f26cf01271e3ee3f1dab8e8486dcdba16a5f6d95a1c030737f3d19db975d52885377027a11ba5532194992d1c7e520f7f615a1a9ba7adfc04d4513541c1c9149315b7997531f9268b35768341adf5664139cee7954727ac275af0685d5e3632608b248a0eba0a9832ad8e6935be1dbb3fcc30bdcb37"}}}}}, &(0x7f0000000300)={0x1, 0x2, [0xc8c, 0x52d, 0x7d1, 0x9c3]})

03:07:03 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x300000000000000)

03:07:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001001070000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3259.837200] FAULT_INJECTION: forcing a failure.
[ 3259.837200] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3259.839961] CPU: 1 PID: 18047 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3259.841251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3259.842784] Call Trace:
[ 3259.843284]  dump_stack+0x107/0x167
[ 3259.843839]  should_fail.cold+0x5/0xa
[ 3259.844554]  __alloc_pages_nodemask+0x182/0x600
[ 3259.845422]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3259.846320]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.847087]  ? lock_acquire+0x197/0x470
[ 3259.847710]  alloc_pages_vma+0xbb/0x410
[ 3259.848459]  shmem_alloc_page+0x10f/0x1e0
[ 3259.849108]  ? shmem_init_inode+0x20/0x20
[ 3259.849765]  ? percpu_counter_add_batch+0x8b/0x140
[ 3259.850524]  ? __vm_enough_memory+0x184/0x360
[ 3259.851201]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3259.852197]  ? shmem_unuse_inode+0xf60/0xf60
[ 3259.852875]  shmem_fallocate+0x78a/0xd30
[ 3259.853657]  ? shmem_evict_inode+0xa20/0xa20
[ 3259.854343]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3259.855309]  ? SOFTIRQ_verbose+0x10/0x10
[ 3259.855937]  ? lock_acquire+0x197/0x470
[ 3259.856682]  ? __x64_sys_fallocate+0xcf/0x140
[ 3259.857356]  ? lock_release+0x680/0x680
[ 3259.858100]  ? _cond_resched+0x12/0x80
[ 3259.858696]  ? selinux_file_permission+0x92/0x520
[ 3259.859593]  ? shmem_evict_inode+0xa20/0xa20
[ 3259.860314]  vfs_fallocate+0x48f/0xd00
[ 3259.861037]  __x64_sys_fallocate+0xcf/0x140
[ 3259.861691]  do_syscall_64+0x33/0x40
[ 3259.862264]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3259.863026] RIP: 0033:0x7f04eff10b19
[ 3259.863590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3259.866287] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3259.867415] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3259.868460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3259.869502] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3259.870563] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3259.871617] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:07:03 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x41c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001001270000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:03 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2ac00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:03 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x1)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
fallocate(r1, 0x2, 0x869, 0xedf3)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

[ 3259.960047] FAULT_INJECTION: forcing a failure.
[ 3259.960047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3259.962248] CPU: 1 PID: 18045 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3259.963255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3259.964426] Call Trace:
[ 3259.964811]  dump_stack+0x107/0x167
[ 3259.965343]  should_fail.cold+0x5/0xa
[ 3259.965919]  _copy_from_user+0x2e/0x1b0
[ 3259.966507]  __copy_msghdr_from_user+0x91/0x4b0
[ 3259.967179]  ? __ia32_sys_shutdown+0x80/0x80
[ 3259.967821]  ? SOFTIRQ_verbose+0x10/0x10
[ 3259.968410]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.969024]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3259.969679]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3259.970449]  ? find_held_lock+0x2c/0x110
[ 3259.971037]  ? __is_insn_slot_addr+0x123/0x290
[ 3259.971701]  io_recvmsg+0xae8/0xd70
[ 3259.972236]  ? lock_chain_count+0x20/0x20
[ 3259.972836]  ? io_sendmsg+0x830/0x830
[ 3259.973386]  ? __is_insn_slot_addr+0x14c/0x290
[ 3259.974055]  ? lock_chain_count+0x20/0x20
[ 3259.974662]  ? mark_lock+0xf5/0x2df0
[ 3259.975203]  ? register_lock_class+0xbb/0x17b0
[ 3259.975862]  ? arch_stack_walk+0x99/0xf0
[ 3259.976453]  ? lock_chain_count+0x20/0x20
[ 3259.977060]  ? __lock_acquire+0xbb1/0x5b00
[ 3259.977703]  ? __lock_acquire+0xbb1/0x5b00
[ 3259.978363]  io_issue_sqe+0x3bd6/0x7700
[ 3259.978957]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3259.979715]  ? SOFTIRQ_verbose+0x10/0x10
[ 3259.980307]  ? percpu_ref_put_many+0x153/0x2b0
[ 3259.980959]  ? io_connect+0x610/0x610
[ 3259.981507]  ? lock_acquire+0x197/0x470
[ 3259.982086]  ? find_held_lock+0x2c/0x110
[ 3259.982678]  ? __fget_files+0x26d/0x4c0
[ 3259.983249]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.983853]  __io_queue_sqe+0x90/0x9d0
[ 3259.984419]  ? io_issue_sqe+0x7700/0x7700
[ 3259.985034]  io_submit_sqes+0x4461/0x85c0
[ 3259.985668]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3259.986397]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3259.987091]  ? lock_downgrade+0x6d0/0x6d0
[ 3259.987685]  ? find_held_lock+0x2c/0x110
[ 3259.988279]  ? io_submit_sqes+0x85c0/0x85c0
[ 3259.988911]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3259.989607]  ? wait_for_completion_io+0x270/0x270
[ 3259.990318]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3259.990984]  ? vfs_write+0x354/0xa70
[ 3259.991523]  ? fput_many+0x2f/0x1a0
[ 3259.992048]  ? ksys_write+0x1a9/0x260
[ 3259.992601]  ? __ia32_sys_read+0xb0/0xb0
[ 3259.993192]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3259.993945]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3259.994728]  do_syscall_64+0x33/0x40
[ 3259.995293]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3259.996056] RIP: 0033:0x7fb2ae3d8b19
[ 3259.996617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3259.999362] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3260.000506] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3260.001580] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3260.002648] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3260.003712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3260.004771] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3260.010085] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
[ 3269.988454] kworker/dying (321) used greatest stack depth: 22752 bytes left
03:07:17 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 87)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001001470000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:17 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0x9, 0x4f, 0x10, 0x0, 0x8000, 0x20000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0x8, 0x6, 0x3, 0x3, 0x1ff, 0x2, 0x9, 0x0, 0x7, 0x0, 0x415d3f4b}, 0x0, 0x9, 0xffffffffffffffff, 0x9)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x6, 0x81, 0x7, 0x3b, 0x0, 0x3, 0x10382, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20000c71, 0x0, @perf_config_ext={0xc6, 0x2}, 0x200, 0x4, 0x8000, 0x6, 0x10001, 0x9, 0x2, 0x0, 0x8, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={<r4=>0x0}, &(0x7f0000000380)=0xc)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x121)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r5, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x9f, 0x20, 0x2, 0x81, 0x0, 0xffff, 0xd093, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8400, 0x6, 0xa8, 0x8, 0x3f, 0xfffeffff, 0x0, 0x0, 0x10000, 0x0, 0x7}, r4, 0x0, 0xffffffffffffffff, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x100000000)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:07:17 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92)

03:07:17 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x1)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
fallocate(r1, 0x2, 0x869, 0xedf3)
listen(r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

03:07:17 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x400000000000000)

03:07:17 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:17 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x208c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x78ce4000)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}], 0x1}, 0x0, 0x4000000}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3273.702798] FAULT_INJECTION: forcing a failure.
[ 3273.702798] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3273.704423] CPU: 0 PID: 18084 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3273.705133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3273.705937] Call Trace:
[ 3273.706207]  dump_stack+0x107/0x167
[ 3273.706562]  should_fail.cold+0x5/0xa
[ 3273.706934]  __alloc_pages_nodemask+0x182/0x600
[ 3273.707386]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3273.707956]  ? lock_downgrade+0x6d0/0x6d0
[ 3273.708357]  ? lock_acquire+0x197/0x470
[ 3273.708757]  alloc_pages_vma+0xbb/0x410
[ 3273.709153]  shmem_alloc_page+0x10f/0x1e0
[ 3273.709570]  ? shmem_init_inode+0x20/0x20
[ 3273.710027]  ? percpu_counter_add_batch+0x8b/0x140
[ 3273.710516]  ? __vm_enough_memory+0x184/0x360
[ 3273.710957]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3273.711489]  ? shmem_unuse_inode+0xf60/0xf60
[ 3273.711926]  shmem_fallocate+0x78a/0xd30
[ 3273.712336]  ? shmem_evict_inode+0xa20/0xa20
[ 3273.712773]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3273.713288]  ? SOFTIRQ_verbose+0x10/0x10
[ 3273.713733]  ? lock_acquire+0x197/0x470
[ 3273.714140]  ? __x64_sys_fallocate+0xcf/0x140
[ 3273.714588]  ? lock_release+0x680/0x680
[ 3273.714974]  ? _cond_resched+0x12/0x80
[ 3273.715381]  ? selinux_file_permission+0x92/0x520
[ 3273.715854]  ? shmem_evict_inode+0xa20/0xa20
[ 3273.716277]  vfs_fallocate+0x48f/0xd00
[ 3273.716660]  __x64_sys_fallocate+0xcf/0x140
[ 3273.717075]  do_syscall_64+0x33/0x40
[ 3273.717437]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3273.717929] RIP: 0033:0x7f04eff10b19
[ 3273.718325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3273.720075] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3273.720806] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3273.721568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3273.722272] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3273.723017] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3273.723694] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3273.725548] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
[ 3273.759921] FAULT_INJECTION: forcing a failure.
[ 3273.759921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3273.761756] CPU: 1 PID: 18083 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3273.762780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3273.763993] Call Trace:
[ 3273.764400]  dump_stack+0x107/0x167
[ 3273.764945]  should_fail.cold+0x5/0xa
[ 3273.765526]  _copy_from_user+0x2e/0x1b0
[ 3273.766135]  __copy_msghdr_from_user+0x91/0x4b0
[ 3273.766824]  ? __ia32_sys_shutdown+0x80/0x80
[ 3273.767488]  ? SOFTIRQ_verbose+0x10/0x10
[ 3273.768086]  ? lock_downgrade+0x6d0/0x6d0
[ 3273.768713]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3273.769376]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3273.770162]  ? find_held_lock+0x2c/0x110
[ 3273.770772]  ? __is_insn_slot_addr+0x123/0x290
[ 3273.771454]  io_recvmsg+0xae8/0xd70
[ 3273.771995]  ? lock_chain_count+0x20/0x20
[ 3273.772608]  ? io_sendmsg+0x830/0x830
[ 3273.773175]  ? __is_insn_slot_addr+0x14c/0x290
[ 3273.773889]  ? lock_chain_count+0x20/0x20
[ 3273.774524]  ? mark_lock+0xf5/0x2df0
[ 3273.775077]  ? register_lock_class+0xbb/0x17b0
[ 3273.775749]  ? arch_stack_walk+0x99/0xf0
[ 3273.776351]  ? lock_chain_count+0x20/0x20
[ 3273.776968]  ? mark_lock+0xf5/0x2df0
[ 3273.777527]  ? lock_chain_count+0x20/0x20
[ 3273.778162]  ? __lock_acquire+0xbb1/0x5b00
[ 3273.778795]  io_issue_sqe+0x3bd6/0x7700
[ 3273.779386]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3273.780151]  ? SOFTIRQ_verbose+0x10/0x10
[ 3273.780757]  ? io_connect+0x610/0x610
[ 3273.781329]  ? lock_acquire+0x197/0x470
[ 3273.781916]  ? find_held_lock+0x2c/0x110
[ 3273.782526]  ? __fget_files+0x26d/0x4c0
[ 3273.783111]  ? lock_downgrade+0x6d0/0x6d0
[ 3273.783728]  __io_queue_sqe+0x90/0x9d0
[ 3273.784309]  ? io_issue_sqe+0x7700/0x7700
[ 3273.784933]  io_submit_sqes+0x4461/0x85c0
[ 3273.785576]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3273.786316]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3273.787027]  ? lock_downgrade+0x6d0/0x6d0
[ 3273.787635]  ? find_held_lock+0x2c/0x110
[ 3273.788236]  ? io_submit_sqes+0x85c0/0x85c0
[ 3273.788883]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3273.789598]  ? wait_for_completion_io+0x270/0x270
[ 3273.790323]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3273.791008]  ? vfs_write+0x354/0xa70
[ 3273.791558]  ? fput_many+0x2f/0x1a0
[ 3273.792098]  ? ksys_write+0x1a9/0x260
[ 3273.792669]  ? __ia32_sys_read+0xb0/0xb0
[ 3273.793267]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3273.794042]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3273.794843]  do_syscall_64+0x33/0x40
[ 3273.795382]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3273.796119] RIP: 0033:0x7fb2ae3d8b19
[ 3273.796660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3273.799283] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3273.800373] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3273.801389] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3273.802418] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3273.803438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3273.804452] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:07:17 executing program 7:
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f00000011c0), 0xc, 0x0}, 0x84c00)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0xc040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000))
fadvise64(r0, 0x7ff, 0x8000000, 0x3)
umount2(&(0x7f0000000140)='./file0\x00', 0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000b7ccf9f483d9b0683b8c9508bb8c6f6a8151", @ANYRES32=<r3=>r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
fcntl$addseals(r3, 0x409, 0x0)
mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x0)
io_uring_setup(0xf88, &(0x7f00000001c0)={0x0, 0x913b, 0x4, 0x1, 0x3d8, 0x0, r2})

03:07:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001002e70000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:17 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 88)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:17 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x500000000000000)

03:07:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000423000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3273.993486] FAULT_INJECTION: forcing a failure.
[ 3273.993486] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3273.995502] CPU: 1 PID: 18115 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3273.996542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3273.997799] Call Trace:
[ 3273.998215]  dump_stack+0x107/0x167
[ 3273.998768]  should_fail.cold+0x5/0xa
[ 3273.999368]  __alloc_pages_nodemask+0x182/0x600
[ 3274.000089]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3274.000999]  ? lock_downgrade+0x6d0/0x6d0
[ 3274.001630]  ? lock_acquire+0x197/0x470
[ 3274.002266]  alloc_pages_vma+0xbb/0x410
[ 3274.002890]  shmem_alloc_page+0x10f/0x1e0
[ 3274.003529]  ? shmem_init_inode+0x20/0x20
[ 3274.004192]  ? percpu_counter_add_batch+0x8b/0x140
[ 3274.004894]  ? __vm_enough_memory+0x184/0x360
[ 3274.005586]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3274.006371]  ? shmem_unuse_inode+0xf60/0xf60
[ 3274.007062]  shmem_fallocate+0x78a/0xd30
[ 3274.007663]  ? shmem_evict_inode+0xa20/0xa20
[ 3274.008337]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3274.009077]  ? SOFTIRQ_verbose+0x10/0x10
[ 3274.009715]  ? lock_acquire+0x197/0x470
[ 3274.010299]  ? __x64_sys_fallocate+0xcf/0x140
[ 3274.010987]  ? lock_release+0x680/0x680
[ 3274.011562]  ? _cond_resched+0x12/0x80
[ 3274.012171]  ? selinux_file_permission+0x92/0x520
[ 3274.012868]  ? shmem_evict_inode+0xa20/0xa20
[ 3274.013542]  vfs_fallocate+0x48f/0xd00
[ 3274.014111]  __x64_sys_fallocate+0xcf/0x140
[ 3274.014770]  do_syscall_64+0x33/0x40
[ 3274.015302]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3274.016085] RIP: 0033:0x7f04eff10b19
[ 3274.016620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3274.019412] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3274.020486] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3274.021483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3274.022493] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3274.023491] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3274.024502] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:07:17 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93)

03:07:17 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000425000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:17 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:17 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
setpriority(0x0, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback, 0xfffffffd}, 0xfffffed0)
r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32])
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000f00000000000000"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
unshare(0x48020200)

03:07:17 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 89)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3274.150578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 3274.233186] FAULT_INJECTION: forcing a failure.
[ 3274.233186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3274.233647] FAULT_INJECTION: forcing a failure.
[ 3274.233647] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3274.234484] CPU: 0 PID: 18126 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3274.234498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3274.234506] Call Trace:
[ 3274.234531]  dump_stack+0x107/0x167
[ 3274.234556]  should_fail.cold+0x5/0xa
[ 3274.234587]  _copy_from_user+0x2e/0x1b0
[ 3274.234618]  __copy_msghdr_from_user+0x91/0x4b0
[ 3274.234649]  ? __ia32_sys_shutdown+0x80/0x80
[ 3274.240457]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3274.240976]  ? find_held_lock+0x2c/0x110
[ 3274.241469]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3274.242088]  ? lock_chain_count+0x20/0x20
[ 3274.242584]  ? __is_insn_slot_addr+0x123/0x290
[ 3274.243121]  ? lock_downgrade+0x6d0/0x6d0
[ 3274.243623]  io_recvmsg+0xae8/0xd70
[ 3274.244063]  ? lock_chain_count+0x20/0x20
[ 3274.244560]  ? io_sendmsg+0x830/0x830
[ 3274.245021]  ? mark_lock+0xf5/0x2df0
[ 3274.245478]  ? lock_chain_count+0x20/0x20
[ 3274.245968]  ? mark_lock+0xf5/0x2df0
[ 3274.246424]  ? __lock_acquire+0xbb1/0x5b00
[ 3274.246950]  ? __lock_acquire+0xbb1/0x5b00
[ 3274.247460]  io_issue_sqe+0x3bd6/0x7700
[ 3274.247938]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3274.248547]  ? SOFTIRQ_verbose+0x10/0x10
[ 3274.249028]  ? percpu_ref_put_many+0x153/0x2b0
[ 3274.249563]  ? io_connect+0x610/0x610
[ 3274.250018]  ? lock_acquire+0x197/0x470
[ 3274.250495]  ? find_held_lock+0x2c/0x110
[ 3274.250977]  ? __fget_files+0x26d/0x4c0
[ 3274.251447]  ? lock_downgrade+0x6d0/0x6d0
[ 3274.251942]  __io_queue_sqe+0x90/0x9d0
[ 3274.252413]  ? io_issue_sqe+0x7700/0x7700
[ 3274.252920]  io_submit_sqes+0x4461/0x85c0
[ 3274.253434]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3274.254004]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3274.254575]  ? lock_downgrade+0x6d0/0x6d0
[ 3274.255058]  ? find_held_lock+0x2c/0x110
[ 3274.255541]  ? io_submit_sqes+0x85c0/0x85c0
[ 3274.256055]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3274.256621]  ? wait_for_completion_io+0x270/0x270
[ 3274.257182]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3274.257722]  ? vfs_write+0x354/0xa70
[ 3274.258167]  ? fput_many+0x2f/0x1a0
[ 3274.258606]  ? ksys_write+0x1a9/0x260
[ 3274.259060]  ? __ia32_sys_read+0xb0/0xb0
[ 3274.259534]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3274.260106]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3274.260578]  do_syscall_64+0x33/0x40
[ 3274.260986]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3274.261546] RIP: 0033:0x7fb2ae3d8b19
[ 3274.261950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3274.263930] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3274.264754] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3274.265392] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3274.266172] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3274.266940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3274.267580] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
[ 3274.268446] CPU: 1 PID: 18136 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3274.269513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3274.270767] Call Trace:
[ 3274.271182]  dump_stack+0x107/0x167
[ 3274.271743]  should_fail.cold+0x5/0xa
[ 3274.272333]  __alloc_pages_nodemask+0x182/0x600
[ 3274.273055]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3274.273975]  ? lock_downgrade+0x6d0/0x6d0
[ 3274.274619]  ? lock_acquire+0x197/0x470
[ 3274.275239]  alloc_pages_vma+0xbb/0x410
[ 3274.275847]  shmem_alloc_page+0x10f/0x1e0
[ 3274.276482]  ? shmem_init_inode+0x20/0x20
[ 3274.277146]  ? percpu_counter_add_batch+0x8b/0x140
[ 3274.277897]  ? __vm_enough_memory+0x184/0x360
[ 3274.278593]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3274.279437]  ? shmem_unuse_inode+0xf60/0xf60
[ 3274.280125]  shmem_fallocate+0x78a/0xd30
[ 3274.280762]  ? shmem_evict_inode+0xa20/0xa20
[ 3274.281432]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3274.282215]  ? SOFTIRQ_verbose+0x10/0x10
[ 3274.282820]  ? lock_acquire+0x197/0x470
[ 3274.283411]  ? __x64_sys_fallocate+0xcf/0x140
[ 3274.284069]  ? lock_release+0x680/0x680
[ 3274.284658]  ? _cond_resched+0x12/0x80
[ 3274.285241]  ? selinux_file_permission+0x92/0x520
[ 3274.285954]  ? shmem_evict_inode+0xa20/0xa20
[ 3274.286602]  vfs_fallocate+0x48f/0xd00
[ 3274.287182]  __x64_sys_fallocate+0xcf/0x140
[ 3274.287799]  do_syscall_64+0x33/0x40
[ 3274.288344]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3274.289064] RIP: 0033:0x7f04eff10b19
[ 3274.289613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3274.292175] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3274.293298] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3274.294321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3274.295317] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3274.296316] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3274.297316] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3274.371193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
03:07:33 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 90)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x5})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:07:33 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="27000000000000000000000004000000003c110000000a00"/50]})
syz_io_uring_setup(0x3d88, &(0x7f0000000280)={0x0, 0x259b, 0x8, 0x3, 0x2cc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=<r1=>0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r0, 0x0, &(0x7f0000000380)="a7bf03d6d898fd1c15be", 0xa, 0x2020, 0x0, {0x0, r2}}, 0x6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r4, 0x10, 0x0, 0x1000002)
r5 = mq_open(&(0x7f00000000c0)='syz_tun\x00', 0x2, 0x140, &(0x7f0000000200)={0x9, 0x2, 0x7, 0xe8})
signalfd4(r5, &(0x7f0000000240)={[0x1]}, 0x8, 0x80000)
dup3(r3, r4, 0x80000)
preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1, 0x8, 0x101)
getpriority(0x2, 0x0)

03:07:33 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x600000000000000)

03:07:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e6661740023800100042a000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:33 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94)

03:07:33 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:33 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000140)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000500)={{r5}, r6, 0x0, @unused=[0xfffffffffffffffe, 0xffffffffffffffa7, 0xffffffff, 0x80], @subvolid=0x800})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0xb, 0x810, r0, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x10000000)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x7)

[ 3289.949108] FAULT_INJECTION: forcing a failure.
[ 3289.949108] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3289.950901] CPU: 1 PID: 18166 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3289.951805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3289.952868] Call Trace:
[ 3289.953222]  dump_stack+0x107/0x167
[ 3289.953705]  should_fail.cold+0x5/0xa
[ 3289.954221]  __alloc_pages_nodemask+0x182/0x600
[ 3289.954836]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3289.955615]  ? lock_downgrade+0x6d0/0x6d0
[ 3289.956151]  ? lock_acquire+0x197/0x470
[ 3289.956688]  alloc_pages_vma+0xbb/0x410
[ 3289.957221]  shmem_alloc_page+0x10f/0x1e0
[ 3289.957761]  ? shmem_init_inode+0x20/0x20
[ 3289.958337]  ? percpu_counter_add_batch+0x8b/0x140
[ 3289.958978]  ? __vm_enough_memory+0x184/0x360
[ 3289.959564]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3289.960274]  ? shmem_unuse_inode+0xf60/0xf60
[ 3289.960857]  shmem_fallocate+0x78a/0xd30
[ 3289.961400]  ? shmem_evict_inode+0xa20/0xa20
[ 3289.961978]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3289.962669]  ? SOFTIRQ_verbose+0x10/0x10
[ 3289.963214]  ? lock_acquire+0x197/0x470
[ 3289.963725]  ? __x64_sys_fallocate+0xcf/0x140
[ 3289.964300]  ? lock_release+0x680/0x680
[ 3289.964810]  ? _cond_resched+0x12/0x80
[ 3289.965320]  ? selinux_file_permission+0x92/0x520
[ 3289.965940]  ? shmem_evict_inode+0xa20/0xa20
[ 3289.966509]  vfs_fallocate+0x48f/0xd00
[ 3289.967018]  __x64_sys_fallocate+0xcf/0x140
[ 3289.967565]  do_syscall_64+0x33/0x40
[ 3289.968040]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3289.968690] RIP: 0033:0x7f04eff10b19
[ 3289.969167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3289.971465] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3289.972430] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3289.973324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3289.974235] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3289.975135] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3289.976032] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3290.022799] FAULT_INJECTION: forcing a failure.
[ 3290.022799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3290.024809] CPU: 0 PID: 18167 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3290.025948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3290.027309] Call Trace:
[ 3290.027748]  dump_stack+0x107/0x167
[ 3290.028355]  should_fail.cold+0x5/0xa
[ 3290.028993]  _copy_from_user+0x2e/0x1b0
[ 3290.029657]  __copy_msghdr_from_user+0x91/0x4b0
[ 3290.030448]  ? __ia32_sys_shutdown+0x80/0x80
[ 3290.031208]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3290.031940]  ? find_held_lock+0x2c/0x110
[ 3290.032610]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3290.033486]  ? lock_chain_count+0x20/0x20
[ 3290.034175]  ? __is_insn_slot_addr+0x123/0x290
[ 3290.034935]  ? lock_downgrade+0x6d0/0x6d0
[ 3290.035627]  io_recvmsg+0xae8/0xd70
[ 3290.036224]  ? lock_chain_count+0x20/0x20
[ 3290.036904]  ? io_sendmsg+0x830/0x830
[ 3290.037526]  ? mark_lock+0xf5/0x2df0
[ 3290.038145]  ? mark_lock+0xf5/0x2df0
[ 3290.038764]  ? lock_chain_count+0x20/0x20
[ 3290.039448]  ? lock_chain_count+0x20/0x20
[ 3290.040123]  ? mark_lock+0xf5/0x2df0
[ 3290.040746]  ? __lock_acquire+0xbb1/0x5b00
[ 3290.041466]  ? __lock_acquire+0xbb1/0x5b00
[ 3290.042160]  io_issue_sqe+0x3bd6/0x7700
[ 3290.042830]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3290.043678]  ? SOFTIRQ_verbose+0x10/0x10
[ 3290.044348]  ? percpu_ref_put_many+0x153/0x2b0
[ 3290.045096]  ? io_connect+0x610/0x610
[ 3290.045727]  ? lock_acquire+0x197/0x470
[ 3290.046378]  ? find_held_lock+0x2c/0x110
[ 3290.047051]  ? __fget_files+0x26d/0x4c0
[ 3290.047701]  ? lock_downgrade+0x6d0/0x6d0
[ 3290.048386]  __io_queue_sqe+0x90/0x9d0
[ 3290.049030]  ? io_issue_sqe+0x7700/0x7700
[ 3290.049732]  io_submit_sqes+0x4461/0x85c0
[ 3290.050451]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3290.051273]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3290.052061]  ? lock_downgrade+0x6d0/0x6d0
[ 3290.052734]  ? find_held_lock+0x2c/0x110
[ 3290.053402]  ? io_submit_sqes+0x85c0/0x85c0
[ 3290.054121]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3290.054921]  ? wait_for_completion_io+0x270/0x270
[ 3290.055717]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3290.056477]  ? vfs_write+0x354/0xa70
[ 3290.057081]  ? fput_many+0x2f/0x1a0
[ 3290.057679]  ? ksys_write+0x1a9/0x260
[ 3290.058308]  ? __ia32_sys_read+0xb0/0xb0
[ 3290.058977]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3290.059834]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3290.060681]  do_syscall_64+0x33/0x40
[ 3290.061285]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3290.062120] RIP: 0033:0x7fb2ae3d8b19
[ 3290.062732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
03:07:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e6661740023800100042b000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3290.065712] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3290.067130] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3290.068284] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3290.069423] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3290.070576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3290.071715] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:07:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x50041, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001200)=ANY=[@ANYBLOB="9f04cd16b2f4dc73a49328916b685feda945324d89ba3f463ba563448011c0dc5812329889db0e227836a38fa18bc39c17f401f3500dfad421c8e886845a3733e8a55a070905146b5f281503e88332ecc048ac05ecf5a03c9c383617688df59a34d3900b3b256396c4933b47e24dbd72037a94f1e4570ef5bdfe373007dc8144d88f283c8bda20169eb4a9497bfea64874fd223f8f0667d34cedf493172a6e7ecaaf228a305fd20ff746c97f39ecfb12ad0b65ee3fafd0b762c1fa38abf1c118e0", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a)
r2 = dup3(r1, 0xffffffffffffffff, 0x80000)
dup3(0xffffffffffffffff, r2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
write(r4, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d", 0x26)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', r4)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35)
fcntl$getown(0xffffffffffffffff, 0x9)
openat(r5, &(0x7f00000011c0)='./file0\x00', 0x2a040, 0x2)
r6 = dup2(0xffffffffffffffff, r5)
ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x20}, 0x100, './file0\x00'})
r7 = dup(0xffffffffffffffff)
unshare(0x48020200)
dup3(r1, r7, 0x0)

03:07:49 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95)

03:07:49 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x700000000000000)

03:07:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e6661740023800100042d000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:49 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:49 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 91)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:49 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1d, 0x4010, r0, 0x10000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r8 = io_uring_setup(0x20f1, &(0x7f0000000200))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r6, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r9}}, 0x7)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x40, 0x400000, 0x23456, {0x0, r9}}, 0x7fffffff)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:07:49 executing program 7:
syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}, 0x22}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]})
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(r0, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x0, r1}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1, r2}], {0x10, 0x5}}, 0x44, 0x1)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(r5, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r8}, {0x2, 0x0, r6}, {0x2, 0x4, r9}], {0x4, 0xa}, [{0x8, 0x1, r7}], {0x10, 0x5}}, 0x44, 0x1)
r10 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(r10, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0, <r12=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
getsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10)
getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r13}, {0x2, 0x0, r11}, {0x2, 0x4, r14}], {0x4, 0xa}, [{0x8, 0x1, r12}], {0x10, 0x5}}, 0x44, 0x1)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x4}, {}, {0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x2, r7}, {0x8, 0x3, r12}], {0x10, 0x4}, {0x20, 0x5}}, 0x6c, 0x3)

[ 3306.034306] tmpfs: Bad value for 'mpol'
[ 3306.067104] FAULT_INJECTION: forcing a failure.
[ 3306.067104] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3306.069708] CPU: 1 PID: 18215 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3306.070986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3306.072500] Call Trace:
[ 3306.072990]  dump_stack+0x107/0x167
[ 3306.073663]  should_fail.cold+0x5/0xa
[ 3306.074379]  __alloc_pages_nodemask+0x182/0x600
[ 3306.075258]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3306.076346]  ? lock_downgrade+0x6d0/0x6d0
[ 3306.077096]  ? lock_acquire+0x197/0x470
[ 3306.077854]  alloc_pages_vma+0xbb/0x410
[ 3306.078601]  shmem_alloc_page+0x10f/0x1e0
[ 3306.078761] tmpfs: Bad value for 'mpol'
[ 3306.079355]  ? shmem_init_inode+0x20/0x20
[ 3306.079406]  ? percpu_counter_add_batch+0x8b/0x140
[ 3306.081692]  ? __vm_enough_memory+0x184/0x360
[ 3306.082552]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3306.083555]  ? shmem_unuse_inode+0xf60/0xf60
[ 3306.084373]  shmem_fallocate+0x78a/0xd30
[ 3306.085136]  ? shmem_evict_inode+0xa20/0xa20
[ 3306.085950]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3306.086943]  ? SOFTIRQ_verbose+0x10/0x10
[ 3306.087727]  ? lock_acquire+0x197/0x470
[ 3306.088397]  ? __x64_sys_fallocate+0xcf/0x140
[ 3306.089224]  ? lock_release+0x680/0x680
[ 3306.089962]  ? _cond_resched+0x12/0x80
[ 3306.090715]  ? selinux_file_permission+0x92/0x520
[ 3306.091613]  ? shmem_evict_inode+0xa20/0xa20
[ 3306.092440]  vfs_fallocate+0x48f/0xd00
[ 3306.093173]  __x64_sys_fallocate+0xcf/0x140
[ 3306.093970]  do_syscall_64+0x33/0x40
[ 3306.094684]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3306.095620] RIP: 0033:0x7f04eff10b19
[ 3306.096299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3306.099644] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3306.101025] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3306.102202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3306.103282] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3306.104359] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3306.105434] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:07:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e6661740023800100042e000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3306.202181] FAULT_INJECTION: forcing a failure.
[ 3306.202181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3306.204651] CPU: 0 PID: 18212 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3306.205768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3306.207118] Call Trace:
[ 3306.207555]  dump_stack+0x107/0x167
[ 3306.208159]  should_fail.cold+0x5/0xa
[ 3306.208792]  _copy_from_user+0x2e/0x1b0
[ 3306.209448]  __copy_msghdr_from_user+0x91/0x4b0
[ 3306.210197]  ? __ia32_sys_shutdown+0x80/0x80
[ 3306.210944]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3306.211673]  ? find_held_lock+0x2c/0x110
[ 3306.212338]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3306.213201]  ? lock_chain_count+0x20/0x20
[ 3306.213876]  ? __is_insn_slot_addr+0x123/0x290
[ 3306.214625]  ? lock_downgrade+0x6d0/0x6d0
[ 3306.215306]  io_recvmsg+0xae8/0xd70
[ 3306.215903]  ? lock_chain_count+0x20/0x20
[ 3306.216578]  ? io_sendmsg+0x830/0x830
[ 3306.217201]  ? mark_lock+0xf5/0x2df0
[ 3306.217818]  ? lock_chain_count+0x20/0x20
[ 3306.218507]  ? __lock_acquire+0xbb1/0x5b00
[ 3306.219227]  ? __lock_acquire+0xbb1/0x5b00
[ 3306.219919]  io_issue_sqe+0x3bd6/0x7700
[ 3306.220573]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3306.221420]  ? SOFTIRQ_verbose+0x10/0x10
[ 3306.222081]  ? percpu_ref_put_many+0x153/0x2b0
[ 3306.222827]  ? io_connect+0x610/0x610
[ 3306.223450]  ? lock_acquire+0x197/0x470
[ 3306.224098]  ? find_held_lock+0x2c/0x110
[ 3306.224766]  ? __fget_files+0x26d/0x4c0
[ 3306.225427]  ? lock_downgrade+0x6d0/0x6d0
[ 3306.226106]  __io_queue_sqe+0x90/0x9d0
[ 3306.226752]  ? io_issue_sqe+0x7700/0x7700
[ 3306.227447]  io_submit_sqes+0x4461/0x85c0
[ 3306.228152]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3306.228958]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3306.229755]  ? io_submit_sqes+0x85c0/0x85c0
[ 3306.230463]  ? recalibrate_cpu_khz+0x10/0x10
[ 3306.231171]  ? ktime_get+0x158/0x1f0
[ 3306.231787]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 3306.232486]  ? clockevents_program_event+0x131/0x360
[ 3306.233312]  ? tick_program_event+0xa8/0x140
[ 3306.234029]  ? hrtimer_interrupt+0x771/0x9b0
[ 3306.234782]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3306.235632]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3306.236470]  do_syscall_64+0x33/0x40
[ 3306.237071]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3306.237898] RIP: 0033:0x7fb2ae3d8b19
[ 3306.238516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3306.241462] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3306.242706] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3306.243851] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3306.245002] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3306.246148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3306.247305] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:07:49 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0x10, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00')
link(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
getpeername$unix(r0, &(0x7f0000000280), &(0x7f0000000300)=0x6e)

03:07:49 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 92)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:07:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000430000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:07:50 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x800000000000000)

03:07:50 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x9}, 0xe)
r4 = syz_io_uring_setup(0x5c, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r5 = io_uring_setup(0x20f1, &(0x7f0000000200))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
io_uring_enter(r0, 0x136a, 0x5a85, 0x1, &(0x7f0000000040)={[0x7f]}, 0x8)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:07:50 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:07:50 executing program 7:
r0 = epoll_create(0x1f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup3(r1, r0, 0x0)
write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15)
write$P9_RWALK(r2, &(0x7f0000000000)={0x57, 0x6f, 0x2, {0x6, [{0x2, 0x4, 0x2}, {0x1, 0x1, 0x1}, {0x40, 0x1, 0x7}, {0x40, 0x2, 0x4}, {0x2, 0x3, 0x2}, {0x0, 0x4, 0x2}]}}, 0x57)

[ 3306.472919] FAULT_INJECTION: forcing a failure.
[ 3306.472919] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3306.475135] CPU: 1 PID: 18238 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3306.476368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3306.477707] Call Trace:
[ 3306.478125]  dump_stack+0x107/0x167
[ 3306.478696]  should_fail.cold+0x5/0xa
[ 3306.479286]  __alloc_pages_nodemask+0x182/0x600
[ 3306.479994]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3306.480889]  ? lock_downgrade+0x6d0/0x6d0
[ 3306.481519]  ? lock_acquire+0x197/0x470
[ 3306.482147]  alloc_pages_vma+0xbb/0x410
[ 3306.482772]  shmem_alloc_page+0x10f/0x1e0
[ 3306.483401]  ? shmem_init_inode+0x20/0x20
[ 3306.484061]  ? percpu_counter_add_batch+0x8b/0x140
[ 3306.484804]  ? __vm_enough_memory+0x184/0x360
[ 3306.485497]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3306.486325]  ? shmem_unuse_inode+0xf60/0xf60
[ 3306.487020]  shmem_fallocate+0x78a/0xd30
[ 3306.487656]  ? shmem_evict_inode+0xa20/0xa20
[ 3306.488332]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3306.489118]  ? SOFTIRQ_verbose+0x10/0x10
[ 3306.489757]  ? lock_acquire+0x197/0x470
[ 3306.490490]  ? __x64_sys_fallocate+0xcf/0x140
[ 3306.491182]  ? lock_release+0x680/0x680
[ 3306.491782]  ? _cond_resched+0x12/0x80
[ 3306.492380]  ? selinux_file_permission+0x92/0x520
[ 3306.493123]  ? shmem_evict_inode+0xa20/0xa20
[ 3306.493801]  vfs_fallocate+0x48f/0xd00
[ 3306.494422]  __x64_sys_fallocate+0xcf/0x140
[ 3306.495075]  do_syscall_64+0x33/0x40
[ 3306.495646]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3306.496426] RIP: 0033:0x7f04eff10b19
[ 3306.496997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3306.499740] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3306.500883] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3306.501953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3306.503033] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3306.504104] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3306.505174] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:08:05 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96)

03:08:05 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xa00000000000000)

03:08:05 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:08:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000458000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:08:05 executing program 7:
socket$packet(0x11, 0x2, 0x300)
lstat(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000000c0))
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000600)=0x8, 0x4)
mlockall(0x3)
r1 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
r5 = signalfd4(r2, &(0x7f00000001c0)={[0x7fff]}, 0x8, 0xc0000)
getsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x82307201, &(0x7f0000000300))
openat(r4, &(0x7f0000000040)='./file1\x00', 0x105080, 0x0)
futimesat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}})
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00')

03:08:05 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:08:05 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, 0x0, 0x80044, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRESDEC=r0])
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x20, 0x2, 0x2, 0x2, 0x0, 0x6, 0xe0040, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x8ae13c0aa8ec07c1}, 0x420, 0x3dc, 0x8, 0x0, 0x200, 0x6, 0x6, 0x0, 0x1f, 0x0, 0x827}, 0x0, 0x9, 0xffffffffffffffff, 0x4)
write$P9_RWSTAT(r2, &(0x7f0000000280)={0x7}, 0x7)
write$P9_RFLUSH(r2, &(0x7f0000000300)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RCREATE(r2, &(0x7f0000000240)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x8}, 0x90b}}, 0x18)
openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x40080, 0x50)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

03:08:05 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 93)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3322.351934] FAULT_INJECTION: forcing a failure.
[ 3322.351934] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3322.353956] CPU: 1 PID: 18278 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3322.354960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3322.356149] Call Trace:
[ 3322.356543]  dump_stack+0x107/0x167
[ 3322.357073]  should_fail.cold+0x5/0xa
[ 3322.357632]  __alloc_pages_nodemask+0x182/0x600
[ 3322.358309]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3322.359180]  ? lock_downgrade+0x6d0/0x6d0
[ 3322.359799]  ? lock_acquire+0x197/0x470
[ 3322.360402]  alloc_pages_vma+0xbb/0x410
[ 3322.361004]  shmem_alloc_page+0x10f/0x1e0
[ 3322.361616]  ? shmem_init_inode+0x20/0x20
[ 3322.362289]  ? percpu_counter_add_batch+0x8b/0x140
[ 3322.363014]  ? __vm_enough_memory+0x184/0x360
[ 3322.363730]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3322.364578]  ? shmem_unuse_inode+0xf60/0xf60
[ 3322.365280]  shmem_fallocate+0x78a/0xd30
[ 3322.365937]  ? shmem_evict_inode+0xa20/0xa20
[ 3322.366632]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3322.367438]  ? SOFTIRQ_verbose+0x10/0x10
[ 3322.368102]  ? lock_acquire+0x197/0x470
[ 3322.368789]  ? __x64_sys_fallocate+0xcf/0x140
[ 3322.369559]  ? lock_release+0x680/0x680
[ 3322.370223]  ? _cond_resched+0x12/0x80
[ 3322.370834]  ? selinux_file_permission+0x92/0x520
[ 3322.371662]  ? shmem_evict_inode+0xa20/0xa20
[ 3322.372419]  vfs_fallocate+0x48f/0xd00
[ 3322.373095]  __x64_sys_fallocate+0xcf/0x140
[ 3322.373766]  do_syscall_64+0x33/0x40
[ 3322.374347]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3322.375130] RIP: 0033:0x7f04eff10b19
[ 3322.375706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3322.378482] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3322.379654] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3322.380743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3322.381832] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3322.382927] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3322.384014] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:08:06 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000008f0000005ed840ef439558e248151d8cdf7dc8b15f1e03000000000000003e600ae42f0b45b2fbc10884dc3b5feb43a7122af6fd78161e66b7da31df78462706ef5495cce082f6c5463f32898287d6e7674dd2afb71558cd722222fcc04240ac6fbfa963e463233d10f8cdd5732b5c12546c963b92e7fe51911ce8ee9de94b0b8792a545e7f384428108ab965bd9000000000041dd7d72945d7f274273668493c13eaec3efc204f75054c33a262f6be953788defb9b30c2a5c7fdf3f910da737169f002d30"], &(0x7f0000000140)=0xb3)
ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x0, @local}, 0x6, {0x2, 0x0, @remote}, 'lo\x00'})

[ 3322.512978] FAULT_INJECTION: forcing a failure.
[ 3322.512978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3322.515037] CPU: 0 PID: 18270 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3322.516162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3322.517499] Call Trace:
[ 3322.517940]  dump_stack+0x107/0x167
[ 3322.518537]  should_fail.cold+0x5/0xa
[ 3322.519176]  _copy_from_user+0x2e/0x1b0
[ 3322.519838]  __copy_msghdr_from_user+0x91/0x4b0
[ 3322.520601]  ? __ia32_sys_shutdown+0x80/0x80
[ 3322.521343]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3322.522075]  ? find_held_lock+0x2c/0x110
[ 3322.522757]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3322.523622]  ? lock_chain_count+0x20/0x20
[ 3322.524292]  ? __is_insn_slot_addr+0x123/0x290
[ 3322.525037]  ? lock_downgrade+0x6d0/0x6d0
[ 3322.525719]  io_recvmsg+0xae8/0xd70
[ 3322.526319]  ? lock_chain_count+0x20/0x20
[ 3322.527021]  ? io_sendmsg+0x830/0x830
[ 3322.527658]  ? mark_lock+0xf5/0x2df0
[ 3322.528278]  ? lock_chain_count+0x20/0x20
[ 3322.528975]  ? __lock_acquire+0xbb1/0x5b00
[ 3322.529702]  ? __lock_acquire+0xbb1/0x5b00
[ 3322.530390]  io_issue_sqe+0x3bd6/0x7700
[ 3322.531084]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3322.531947]  ? SOFTIRQ_verbose+0x10/0x10
[ 3322.532616]  ? percpu_ref_put_many+0x153/0x2b0
[ 3322.533366]  ? io_connect+0x610/0x610
[ 3322.533994]  ? lock_acquire+0x197/0x470
[ 3322.534656]  ? find_held_lock+0x2c/0x110
[ 3322.535330]  ? __fget_files+0x26d/0x4c0
[ 3322.535982]  ? lock_downgrade+0x6d0/0x6d0
[ 3322.536668]  __io_queue_sqe+0x90/0x9d0
[ 3322.537312]  ? io_issue_sqe+0x7700/0x7700
[ 3322.537997]  io_submit_sqes+0x4461/0x85c0
[ 3322.538718]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3322.539527]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3322.540314]  ? lock_downgrade+0x6d0/0x6d0
[ 3322.540984]  ? find_held_lock+0x2c/0x110
[ 3322.541658]  ? io_submit_sqes+0x85c0/0x85c0
[ 3322.542370]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3322.543159]  ? wait_for_completion_io+0x270/0x270
[ 3322.543951]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3322.544713]  ? vfs_write+0x354/0xa70
[ 3322.545328]  ? fput_many+0x2f/0x1a0
[ 3322.545920]  ? ksys_write+0x1a9/0x260
[ 3322.546546]  ? __ia32_sys_read+0xb0/0xb0
[ 3322.547210]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3322.548073]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3322.548922]  do_syscall_64+0x33/0x40
[ 3322.549534]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3322.550355] RIP: 0033:0x7fb2ae3d8b19
[ 3322.550977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3322.553932] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3322.555179] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3322.556347] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3322.557501] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3322.558690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3322.559847] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:08:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000463000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:08:06 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 94)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:08:06 executing program 2:
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xe756b577ede822c7, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x20, 0x0, 0x4307, 0x84104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20180, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x8, 0x9c, 0x81, 0x0, 0x100000001, 0x1040, 0x1e, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000240), 0x303be54793f710a0}, 0x188df, 0x1, 0x9, 0x2, 0x2, 0x2, 0x2fa, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r0, 0x2)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)={'syz1', "662caa5d3a1ab5a57776d3177dae0f595adaa34a79a46a00b785368fa3aad74ac31f015a4113ecf09883f26212368d42d908053f833e3d0cec9eb0d9c86c5bc442a8cc3c2171eee3a63783b1c1a853c02f48b814537e12f4cd8562972fde610a57c433b15388539be0c56a936885aeacf292fd655a8ff2bb5bb9009c8b229ba2514dd9c85a5e82e1f0de07aa5be52eccf91531ee6f38fcedf22b6ccc02f0c6f87b13f7a61b147a5528afed31743d10c207c7c351af17bda4b80bed4d469e55135d1b38b7fdc5e0fce032c42210806543c0e922edbc25"}, 0xda)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x800004)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8937, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
ftruncate(r5, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10040002}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04fe24507000fcdbdf250cffffffe80083debc3700", @ANYRES32=r6, @ANYBLOB="04000b0004000b005c0050800900010017405ca2fa0000001100010081666437e9f44f7a7544d11b7a0000000800030005ac0f00040005000900010075de56ee4100000009000100e07e76a3fe0000000900010056d9bd790800000005000200010000000900070097df5dad330000000800090001ac0f00"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4004004)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000280), &(0x7f0000000400)='./file0\x00', 0x8, 0x2)

03:08:06 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
creat(&(0x7f00000000c0)='./file1\x00', 0x100)

[ 3322.737149] FAULT_INJECTION: forcing a failure.
[ 3322.737149] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3322.739586] CPU: 0 PID: 18303 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3322.740713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3322.742056] Call Trace:
[ 3322.742491]  dump_stack+0x107/0x167
[ 3322.743091]  should_fail.cold+0x5/0xa
[ 3322.743714]  __alloc_pages_nodemask+0x182/0x600
[ 3322.744476]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3322.745445]  ? lock_downgrade+0x6d0/0x6d0
[ 3322.746115]  ? lock_acquire+0x197/0x470
[ 3322.746797]  alloc_pages_vma+0xbb/0x410
[ 3322.747450]  shmem_alloc_page+0x10f/0x1e0
[ 3322.748130]  ? shmem_init_inode+0x20/0x20
[ 3322.748840]  ? percpu_counter_add_batch+0x8b/0x140
[ 3322.749639]  ? __vm_enough_memory+0x184/0x360
[ 3322.750375]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3322.751263]  ? shmem_unuse_inode+0xf60/0xf60
[ 3322.751991]  shmem_fallocate+0x78a/0xd30
[ 3322.752668]  ? shmem_evict_inode+0xa20/0xa20
[ 3322.753388]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3322.754232]  ? SOFTIRQ_verbose+0x10/0x10
[ 3322.754916]  ? lock_acquire+0x197/0x470
[ 3322.755561]  ? __x64_sys_fallocate+0xcf/0x140
[ 3322.756296]  ? lock_release+0x680/0x680
[ 3322.756944]  ? _cond_resched+0x12/0x80
[ 3322.757590]  ? selinux_file_permission+0x92/0x520
[ 3322.758377]  ? shmem_evict_inode+0xa20/0xa20
[ 3322.759096]  vfs_fallocate+0x48f/0xd00
[ 3322.759739]  __x64_sys_fallocate+0xcf/0x140
[ 3322.760450]  do_syscall_64+0x33/0x40
[ 3322.761055]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3322.761889] RIP: 0033:0x7f04eff10b19
[ 3322.762492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3322.765475] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3322.766713] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3322.767909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3322.769076] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3322.770233] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3322.771409] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:08:06 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x2000000000000000)

[ 3322.810619] 9pnet: Insufficient options for proto=fd
[ 3322.842910] 9pnet: Insufficient options for proto=fd
03:08:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000464000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:08:06 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_setup(0xa5d, &(0x7f0000000040)={0x0, 0x4911, 0x3, 0x1, 0x29f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000001680)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd=r3, 0x7, &(0x7f0000001600)=[{&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000001500)=""/213, 0xd5}, {&(0x7f0000000280)=""/30, 0x1e}], 0x6, 0x4}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:08:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 95)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:08:23 executing program 1:
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000540)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
sendfile(r0, r1, 0x0, 0x7)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@hide}, {@mode={'mode', 0x3d, 0xfff}}, {@unhide}]})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/rt_cache\x00')
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182})
perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x40, 0x5, 0x0, 0x8, 0x0, 0x4, 0x93ba1b6c1fa48a03, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x18600, 0x39, 0x3, 0x6, 0x10000, 0xfffeffff, 0x4, 0x0, 0x8001, 0x0, 0x274c}, 0xffffffffffffffff, 0x200000000000000f, r2, 0x8)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"])
r5 = epoll_create(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0))
ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0)

03:08:23 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97)

03:08:23 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x8000000)
r6 = syz_io_uring_setup(0x769a, &(0x7f0000000040)={0x0, 0xf561, 0x20, 0x2, 0x121}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r7=>0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r8=>r6}, './file0\x00'})
syz_io_uring_setup(0x55e8, &(0x7f0000000340)={0x0, 0x58fb, 0x20, 0x2, 0x332, 0x0, r8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0)=<r9=>0x0, &(0x7f0000000400))
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_submit(r9, 0x0, &(0x7f00000008c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2000, @fd=r10, 0xfffffffffffffff8, &(0x7f0000000840)=[{&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000580)=""/29, 0x1d}, {&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/80, 0x50}], 0x7, 0x2}, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x4, 0x609000000000000}, 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r11=>r6, {0x6}}, './file0\x00'})
io_uring_enter(r11, 0x7ffa, 0x6f4, 0x4, &(0x7f0000000300)={[0x6]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:08:23 executing program 7:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0))
pipe(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x20, 0x96, 0x0, 0x2, 0x0, 0x10000000000005e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x800, 0xfffffffffffffffc}, 0x400, 0x0, 0x1002, 0x1, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
creat(&(0x7f0000000240)='./file0\x00', 0x49)
r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x3)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2})
fstatfs(r1, &(0x7f0000002e00)=""/4102)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00001b0000ce7c00cd97d723f5bd14b2e26fa82a4f7f8945ae13f8c51ab684c8e62ebeef10817a8a57bfa1f641e5af396f4e2ca45aff190445d871fb8613875f036e9988c1755e35e7a09934208d28305ed2fcca68b61e9c1c98fd525244f8e4b4a0e7fe6bb4", @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x5, 0x1, 0x3})
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0xfffffffffffffffe, 0xf4, 0xfffffffffffffff9})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd})

03:08:23 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:08:23 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x3f00000000000000)

03:08:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000469000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3340.451162] FAULT_INJECTION: forcing a failure.
[ 3340.451162] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3340.454115] CPU: 0 PID: 18348 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3340.455449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3340.457038] Call Trace:
03:08:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e6661740023800100046c000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3340.457556]  dump_stack+0x107/0x167
[ 3340.458444]  should_fail.cold+0x5/0xa
[ 3340.459205]  __alloc_pages_nodemask+0x182/0x600
[ 3340.460074]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3340.461183]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.461965]  ? lock_acquire+0x197/0x470
[ 3340.462754]  alloc_pages_vma+0xbb/0x410
[ 3340.463516]  shmem_alloc_page+0x10f/0x1e0
[ 3340.464292]  ? shmem_init_inode+0x20/0x20
[ 3340.465107]  ? percpu_counter_add_batch+0x8b/0x140
[ 3340.466032]  ? __vm_enough_memory+0x184/0x360
[ 3340.466890]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3340.467905]  ? shmem_unuse_inode+0xf60/0xf60
[ 3340.468743]  shmem_fallocate+0x78a/0xd30
[ 3340.469513]  ? shmem_evict_inode+0xa20/0xa20
[ 3340.470332]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3340.471304]  ? SOFTIRQ_verbose+0x10/0x10
[ 3340.472108]  ? lock_acquire+0x197/0x470
[ 3340.472871]  ? __x64_sys_fallocate+0xcf/0x140
[ 3340.473730]  ? lock_release+0x680/0x680
[ 3340.474484]  ? _cond_resched+0x12/0x80
[ 3340.475237]  ? selinux_file_permission+0x92/0x520
[ 3340.476162]  ? shmem_evict_inode+0xa20/0xa20
[ 3340.477004]  vfs_fallocate+0x48f/0xd00
[ 3340.477752]  __x64_sys_fallocate+0xcf/0x140
[ 3340.478572]  do_syscall_64+0x33/0x40
[ 3340.479282]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3340.480255] RIP: 0033:0x7f04eff10b19
[ 3340.480948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3340.484415] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3340.485817] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
03:08:24 executing program 7:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
syz_io_uring_setup(0x11a8, &(0x7f0000000240)={0x0, 0x6b92, 0x4, 0x5, 0x3ce, 0x0, r0}, &(0x7f0000014000/0x5000)=nil, &(0x7f000083b000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_dev$loop(&(0x7f0000000580), 0x400, 0x40100)
syz_io_uring_submit(r1, 0x0, &(0x7f00000005c0)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd=r2, 0x8000, {}, 0x4, 0x1, 0x0, {0x0, 0x0, r3}}, 0x3)
r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3340.487144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3340.488520] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3340.489793] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3340.491078] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3340.564377] FAULT_INJECTION: forcing a failure.
[ 3340.564377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3340.565729] CPU: 1 PID: 18352 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3340.566466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3340.567362] Call Trace:
[ 3340.567656]  dump_stack+0x107/0x167
[ 3340.568046]  should_fail.cold+0x5/0xa
[ 3340.568459]  _copy_from_user+0x2e/0x1b0
[ 3340.568898]  __copy_msghdr_from_user+0x91/0x4b0
[ 3340.569397]  ? __ia32_sys_shutdown+0x80/0x80
[ 3340.569881]  ? SOFTIRQ_verbose+0x10/0x10
[ 3340.570331]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.570801]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3340.571281]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3340.571846]  ? find_held_lock+0x2c/0x110
[ 3340.572297]  ? __is_insn_slot_addr+0x123/0x290
[ 3340.572793]  io_recvmsg+0xae8/0xd70
[ 3340.573183]  ? lock_chain_count+0x20/0x20
[ 3340.573625]  ? io_sendmsg+0x830/0x830
[ 3340.574031]  ? __is_insn_slot_addr+0x14c/0x290
[ 3340.574516]  ? lock_chain_count+0x20/0x20
[ 3340.574967]  ? mark_lock+0xf5/0x2df0
[ 3340.575367]  ? register_lock_class+0xbb/0x17b0
[ 3340.575856]  ? arch_stack_walk+0x99/0xf0
[ 3340.576291]  ? lock_chain_count+0x20/0x20
[ 3340.576745]  ? __lock_acquire+0xbb1/0x5b00
[ 3340.577214]  ? __lock_acquire+0xbb1/0x5b00
[ 3340.577673]  io_issue_sqe+0x3bd6/0x7700
[ 3340.578106]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3340.578667]  ? SOFTIRQ_verbose+0x10/0x10
[ 3340.579110]  ? percpu_ref_put_many+0x153/0x2b0
[ 3340.579597]  ? io_connect+0x610/0x610
[ 3340.580003]  ? lock_acquire+0x197/0x470
[ 3340.580423]  ? find_held_lock+0x2c/0x110
[ 3340.580865]  ? __fget_files+0x26d/0x4c0
[ 3340.581290]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.581745]  __io_queue_sqe+0x90/0x9d0
[ 3340.582163]  ? io_issue_sqe+0x7700/0x7700
[ 3340.582617]  io_submit_sqes+0x4461/0x85c0
[ 3340.583097]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3340.583626]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3340.584141]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.584579]  ? find_held_lock+0x2c/0x110
[ 3340.585017]  ? io_submit_sqes+0x85c0/0x85c0
[ 3340.585496]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3340.586010]  ? wait_for_completion_io+0x270/0x270
[ 3340.586527]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3340.587025]  ? vfs_write+0x354/0xa70
[ 3340.587425]  ? fput_many+0x2f/0x1a0
[ 3340.587816]  ? ksys_write+0x1a9/0x260
[ 3340.588221]  ? __ia32_sys_read+0xb0/0xb0
[ 3340.588657]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3340.589213]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3340.589768]  do_syscall_64+0x33/0x40
[ 3340.590166]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3340.590709] RIP: 0033:0x7fb2ae3d8b19
[ 3340.591112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3340.593021] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3340.593824] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3340.594564] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3340.595315] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3340.596064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3340.596810] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:08:24 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 96)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:08:24 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98)

[ 3340.667900] FAULT_INJECTION: forcing a failure.
[ 3340.667900] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3340.669457] CPU: 1 PID: 18375 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3340.670153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3340.670988] Call Trace:
[ 3340.671262]  dump_stack+0x107/0x167
[ 3340.671637]  should_fail.cold+0x5/0xa
[ 3340.672028]  __alloc_pages_nodemask+0x182/0x600
[ 3340.672509]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3340.673111]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.673530]  ? lock_acquire+0x197/0x470
[ 3340.673945]  alloc_pages_vma+0xbb/0x410
[ 3340.674360]  shmem_alloc_page+0x10f/0x1e0
[ 3340.674780]  ? shmem_init_inode+0x20/0x20
[ 3340.675228]  ? percpu_counter_add_batch+0x8b/0x140
[ 3340.675727]  ? __vm_enough_memory+0x184/0x360
[ 3340.676185]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3340.676741]  ? shmem_unuse_inode+0xf60/0xf60
[ 3340.677195]  shmem_fallocate+0x78a/0xd30
[ 3340.677624]  ? shmem_evict_inode+0xa20/0xa20
[ 3340.678069]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3340.678608]  ? SOFTIRQ_verbose+0x10/0x10
[ 3340.679037]  ? lock_acquire+0x197/0x470
[ 3340.679445]  ? __x64_sys_fallocate+0xcf/0x140
[ 3340.679907]  ? lock_release+0x680/0x680
[ 3340.680309]  ? _cond_resched+0x12/0x80
[ 3340.680707]  ? selinux_file_permission+0x92/0x520
[ 3340.681199]  ? shmem_evict_inode+0xa20/0xa20
[ 3340.681646]  vfs_fallocate+0x48f/0xd00
[ 3340.682053]  __x64_sys_fallocate+0xcf/0x140
[ 3340.682495]  do_syscall_64+0x33/0x40
[ 3340.682888]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3340.683406] RIP: 0033:0x7f04eff10b19
[ 3340.683790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3340.685623] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3340.686409] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3340.687154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3340.687879] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3340.688596] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3340.689320] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:08:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e6661740023800100046f000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:08:24 executing program 1:
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)="7b575edeb5d3f00382398c63b4b2ec0605b83e3bd55938ab97b966c8d451b332ebb71930f53089fcfb692259df02efbb3fe08d1756af659f8d856f1cde02170bd7e4fccb4ec4a7a11f0ecfd79d61809bc46cc815", 0x54, r1}, 0x68)
pwrite64(r0, &(0x7f0000000180)="af", 0x1, 0x0)

[ 3340.769021] FAULT_INJECTION: forcing a failure.
[ 3340.769021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3340.770215] CPU: 1 PID: 18378 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3340.770887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3340.771688] Call Trace:
[ 3340.771951]  dump_stack+0x107/0x167
[ 3340.772310]  should_fail.cold+0x5/0xa
[ 3340.772689]  _copy_from_user+0x2e/0x1b0
[ 3340.773080]  __copy_msghdr_from_user+0x91/0x4b0
[ 3340.773532]  ? __ia32_sys_shutdown+0x80/0x80
[ 3340.773979]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3340.774416]  ? find_held_lock+0x2c/0x110
[ 3340.774814]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3340.775347]  ? lock_chain_count+0x20/0x20
[ 3340.775748]  ? __is_insn_slot_addr+0x123/0x290
[ 3340.776189]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.776593]  io_recvmsg+0xae8/0xd70
[ 3340.776948]  ? lock_chain_count+0x20/0x20
[ 3340.777347]  ? io_sendmsg+0x830/0x830
[ 3340.777722]  ? mark_lock+0xf5/0x2df0
[ 3340.778083]  ? lock_chain_count+0x20/0x20
[ 3340.778488]  ? __lock_acquire+0xbb1/0x5b00
[ 3340.778915]  ? __lock_acquire+0xbb1/0x5b00
[ 3340.779327]  io_issue_sqe+0x3bd6/0x7700
[ 3340.779715]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3340.780214]  ? SOFTIRQ_verbose+0x10/0x10
[ 3340.780608]  ? percpu_ref_put_many+0x153/0x2b0
[ 3340.781048]  ? io_connect+0x610/0x610
[ 3340.781416]  ? lock_acquire+0x197/0x470
[ 3340.781796]  ? find_held_lock+0x2c/0x110
[ 3340.782191]  ? __fget_files+0x26d/0x4c0
[ 3340.782579]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.783310]  __io_queue_sqe+0x90/0x9d0
[ 3340.784112]  ? io_issue_sqe+0x7700/0x7700
[ 3340.784965]  io_submit_sqes+0x4461/0x85c0
[ 3340.785847]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3340.786862]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3340.787847]  ? lock_downgrade+0x6d0/0x6d0
[ 3340.788553]  ? find_held_lock+0x2c/0x110
[ 3340.789262]  ? io_submit_sqes+0x85c0/0x85c0
[ 3340.790016]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3340.790868]  ? wait_for_completion_io+0x270/0x270
[ 3340.791701]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3340.792507]  ? vfs_write+0x354/0xa70
[ 3340.793146]  ? fput_many+0x2f/0x1a0
[ 3340.793779]  ? ksys_write+0x1a9/0x260
[ 3340.794433]  ? __ia32_sys_read+0xb0/0xb0
[ 3340.795149]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3340.796042]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3340.796936]  do_syscall_64+0x33/0x40
[ 3340.797579]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3340.798464] RIP: 0033:0x7fb2ae3d8b19
[ 3340.799124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3340.802185] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3340.803281] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3340.804317] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3340.805342] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3340.806363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3340.807394] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:08:24 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x34c40, 0x20)
ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x0)
r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
close(r3)
close_range(r3, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b4a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x30, 0x0, 0x0, 0x0, 0x3650, 0xfffffffe, 0xfffe, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x138)
copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0)

03:08:24 executing program 7:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, '!*.{?-}/%\\'}}]}})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

[ 3340.875940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
03:08:24 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:08:24 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 97)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3341.061703] FAULT_INJECTION: forcing a failure.
[ 3341.061703] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3341.064558] CPU: 1 PID: 18398 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3341.065763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3341.067190] Call Trace:
[ 3341.067660]  dump_stack+0x107/0x167
[ 3341.068296]  should_fail.cold+0x5/0xa
[ 3341.068965]  __alloc_pages_nodemask+0x182/0x600
[ 3341.069779]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3341.070834]  ? lock_downgrade+0x6d0/0x6d0
[ 3341.071569]  ? lock_acquire+0x197/0x470
[ 3341.072295]  alloc_pages_vma+0xbb/0x410
[ 3341.073003]  shmem_alloc_page+0x10f/0x1e0
[ 3341.073727]  ? shmem_init_inode+0x20/0x20
[ 3341.074499]  ? percpu_counter_add_batch+0x8b/0x140
[ 3341.075372]  ? __vm_enough_memory+0x184/0x360
[ 3341.076166]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3341.077116]  ? shmem_unuse_inode+0xf60/0xf60
[ 3341.077907]  shmem_fallocate+0x78a/0xd30
[ 3341.078647]  ? shmem_evict_inode+0xa20/0xa20
[ 3341.079430]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3341.080349]  ? SOFTIRQ_verbose+0x10/0x10
[ 3341.081080]  ? lock_acquire+0x197/0x470
[ 3341.081780]  ? __x64_sys_fallocate+0xcf/0x140
[ 3341.082546]  ? lock_release+0x680/0x680
[ 3341.083160]  ? _cond_resched+0x12/0x80
[ 3341.083759]  ? selinux_file_permission+0x92/0x520
[ 3341.084493]  ? shmem_evict_inode+0xa20/0xa20
[ 3341.085151]  vfs_fallocate+0x48f/0xd00
[ 3341.085745]  __x64_sys_fallocate+0xcf/0x140
[ 3341.086392]  do_syscall_64+0x33/0x40
[ 3341.086953]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3341.087706] RIP: 0033:0x7f04eff10b19
[ 3341.088267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3341.090968] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3341.092109] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3341.093173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3341.094242] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3341.095318] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3341.096380] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
[ 3345.765311] Bluetooth: hci5: command 0x0409 tx timeout
[ 3347.815267] Bluetooth: hci5: command 0x041b tx timeout
[ 3349.861547] Bluetooth: hci5: command 0x040f tx timeout
[ 3350.945641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3350.947208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3350.950159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3350.979099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3350.980480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3350.982967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 3351.908243] Bluetooth: hci5: command 0x0419 tx timeout
03:08:49 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x4000000000000000)

03:08:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000473000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:08:49 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:08:49 executing program 7:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsname={'fsname', 0x3d, '!*.{?-}/%\\'}}]}})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

03:08:49 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@mcast1, 0x56})
sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000100001000000000000000000ac141400000000000000000000000000ac1e0001000022c1dc8444b8e49cd22d000000000000000000000000000000000000000000000000000040a39088e9274119e02b", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e00000010000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686132353600"/244], 0x13c}}, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r6, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)=""/202, 0xca}], 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r0)
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={0x0, @xdp={0x2c, 0x8, 0x0, 0xc}, @hci={0x1f, 0x1, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x20, 0x0, 0x0, 0x0, 0x101, &(0x7f00000006c0)='batadv_slave_1\x00', 0x8, 0x6, 0x5})
dup3(r4, r5, 0x80000)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca4b1d49", 0x1d}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0, 0x4000000}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0))
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:08:49 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99)

03:08:49 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = fcntl$dupfd(r1, 0x406, r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='\x00')
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
close(0xffffffffffffffff)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:08:49 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 98)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3366.301973] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3366.332162] FAULT_INJECTION: forcing a failure.
[ 3366.332162] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3366.334455] CPU: 1 PID: 18883 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3366.335506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3366.336733] Call Trace:
[ 3366.337136]  dump_stack+0x107/0x167
[ 3366.337684]  should_fail.cold+0x5/0xa
[ 3366.338262]  __alloc_pages_nodemask+0x182/0x600
[ 3366.338966]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3366.339881]  ? lock_downgrade+0x6d0/0x6d0
[ 3366.340491]  ? lock_acquire+0x197/0x470
[ 3366.341097]  alloc_pages_vma+0xbb/0x410
[ 3366.341694]  shmem_alloc_page+0x10f/0x1e0
[ 3366.342306]  ? shmem_init_inode+0x20/0x20
[ 3366.342951]  ? percpu_counter_add_batch+0x8b/0x140
[ 3366.343695]  ? __vm_enough_memory+0x184/0x360
[ 3366.344351]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3366.345150]  ? shmem_unuse_inode+0xf60/0xf60
[ 3366.345795]  shmem_fallocate+0x78a/0xd30
[ 3366.346396]  ? shmem_evict_inode+0xa20/0xa20
[ 3366.347042]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3366.347848]  ? SOFTIRQ_verbose+0x10/0x10
[ 3366.348467]  ? lock_acquire+0x197/0x470
[ 3366.349060]  ? __x64_sys_fallocate+0xcf/0x140
[ 3366.349729]  ? lock_release+0x680/0x680
[ 3366.350320]  ? _cond_resched+0x12/0x80
[ 3366.350906]  ? selinux_file_permission+0x92/0x520
[ 3366.351656]  ? shmem_evict_inode+0xa20/0xa20
[ 3366.352316]  vfs_fallocate+0x48f/0xd00
[ 3366.352905]  __x64_sys_fallocate+0xcf/0x140
[ 3366.353553]  do_syscall_64+0x33/0x40
[ 3366.354110]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3366.354869] RIP: 0033:0x7f04eff10b19
[ 3366.355448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3366.358149] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3366.359297] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3366.360347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3366.361398] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3366.362454] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3366.363530] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:08:50 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[])
r1 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00')
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r0, @in_args={0x2}}, './file0\x00'})
getdents64(r4, &(0x7f0000000240)=""/72, 0x48)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}, 0x1}, 0xadc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
lseek(r5, 0x0, 0x3)
r6 = openat$incfs(r0, &(0x7f0000000340)='.log\x00', 0x0, 0x4e)
connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)
r7 = openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r8, 0x0, 0x100000001)

[ 3366.464051] FAULT_INJECTION: forcing a failure.
[ 3366.464051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3366.466573] CPU: 0 PID: 18879 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3366.467693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3366.468991] Call Trace:
[ 3366.469420]  dump_stack+0x107/0x167
[ 3366.470011]  should_fail.cold+0x5/0xa
[ 3366.470636]  _copy_from_user+0x2e/0x1b0
[ 3366.471308]  __copy_msghdr_from_user+0x91/0x4b0
[ 3366.472061]  ? __ia32_sys_shutdown+0x80/0x80
[ 3366.472787]  ? SOFTIRQ_verbose+0x10/0x10
[ 3366.473443]  ? lock_downgrade+0x6d0/0x6d0
[ 3366.474132]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3366.474862]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3366.475726]  ? find_held_lock+0x2c/0x110
[ 3366.476390]  ? __is_insn_slot_addr+0x123/0x290
[ 3366.477138]  io_recvmsg+0xae8/0xd70
[ 3366.477731]  ? lock_chain_count+0x20/0x20
[ 3366.478404]  ? io_sendmsg+0x830/0x830
[ 3366.479030]  ? lock_chain_count+0x20/0x20
[ 3366.479712]  ? lock_chain_count+0x20/0x20
[ 3366.480386]  ? mark_lock+0xf5/0x2df0
[ 3366.481003]  ? register_lock_class+0xbb/0x17b0
[ 3366.481758]  ? lock_chain_count+0x20/0x20
[ 3366.482439]  ? __lock_acquire+0xbb1/0x5b00
[ 3366.483154]  ? __lock_acquire+0xbb1/0x5b00
[ 3366.483857]  io_issue_sqe+0x3bd6/0x7700
[ 3366.484514]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3366.485365]  ? SOFTIRQ_verbose+0x10/0x10
[ 3366.486029]  ? percpu_ref_put_many+0x153/0x2b0
[ 3366.486777]  ? io_connect+0x610/0x610
[ 3366.487411]  ? lock_acquire+0x197/0x470
[ 3366.488063]  ? find_held_lock+0x2c/0x110
[ 3366.488742]  ? __fget_files+0x26d/0x4c0
[ 3366.489383]  ? lock_downgrade+0x6d0/0x6d0
[ 3366.490062]  __io_queue_sqe+0x90/0x9d0
[ 3366.490709]  ? io_issue_sqe+0x7700/0x7700
[ 3366.491414]  io_submit_sqes+0x4461/0x85c0
[ 3366.492123]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3366.492933]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3366.493722]  ? lock_downgrade+0x6d0/0x6d0
[ 3366.494388]  ? find_held_lock+0x2c/0x110
[ 3366.495049]  ? io_submit_sqes+0x85c0/0x85c0
[ 3366.495772]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3366.496558]  ? wait_for_completion_io+0x270/0x270
[ 3366.497345]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3366.498099]  ? vfs_write+0x354/0xa70
[ 3366.498706]  ? fput_many+0x2f/0x1a0
[ 3366.499307]  ? ksys_write+0x1a9/0x260
[ 3366.499927]  ? __ia32_sys_read+0xb0/0xb0
[ 3366.500598]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3366.501448]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3366.502293]  do_syscall_64+0x33/0x40
[ 3366.502903]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3366.503742] RIP: 0033:0x7fb2ae3d8b19
[ 3366.504345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3366.507304] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3366.508541] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3366.509684] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3366.510194] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3366.510822] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3366.510834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3366.510852] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:08:50 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 99)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3366.569677] FAULT_INJECTION: forcing a failure.
[ 3366.569677] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3366.571958] CPU: 0 PID: 18902 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3366.573100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3366.574455] Call Trace:
[ 3366.574894]  dump_stack+0x107/0x167
[ 3366.575515]  should_fail.cold+0x5/0xa
[ 3366.576157]  __alloc_pages_nodemask+0x182/0x600
[ 3366.576925]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3366.577906]  ? lock_downgrade+0x6d0/0x6d0
[ 3366.578588]  ? lock_acquire+0x197/0x470
[ 3366.579265]  alloc_pages_vma+0xbb/0x410
[ 3366.579932]  shmem_alloc_page+0x10f/0x1e0
[ 3366.580615]  ? shmem_init_inode+0x20/0x20
[ 3366.581326]  ? percpu_counter_add_batch+0x8b/0x140
[ 3366.582139]  ? __vm_enough_memory+0x184/0x360
[ 3366.582888]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3366.583790]  ? shmem_unuse_inode+0xf60/0xf60
[ 3366.584531]  shmem_fallocate+0x78a/0xd30
[ 3366.585217]  ? shmem_evict_inode+0xa20/0xa20
[ 3366.585941]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3366.586792]  ? SOFTIRQ_verbose+0x10/0x10
[ 3366.587482]  ? lock_acquire+0x197/0x470
[ 3366.588133]  ? __x64_sys_fallocate+0xcf/0x140
[ 3366.588878]  ? lock_release+0x680/0x680
[ 3366.589526]  ? _cond_resched+0x12/0x80
[ 3366.590176]  ? selinux_file_permission+0x92/0x520
[ 3366.590976]  ? shmem_evict_inode+0xa20/0xa20
[ 3366.591724]  vfs_fallocate+0x48f/0xd00
[ 3366.592376]  __x64_sys_fallocate+0xcf/0x140
[ 3366.593089]  do_syscall_64+0x33/0x40
[ 3366.593699]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3366.594540] RIP: 0033:0x7f04eff10b19
[ 3366.595162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3366.598135] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3366.599397] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3366.600568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3366.601743] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3366.602913] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000002
[ 3366.604082] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:08:50 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

03:08:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000475000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:08:50 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x4101000000000000)

03:08:50 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x12}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:08:50 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x18}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

[ 3366.885164] audit: type=1326 audit(1715656130.533:180): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540caab19 code=0x7ffc0000
[ 3366.888470] audit: type=1326 audit(1715656130.533:181): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540caab19 code=0x7ffc0000
03:08:50 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004) (fail_nth: 100)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3366.899862] audit: type=1326 audit(1715656130.544:182): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7540caab19 code=0x7ffc0000
[ 3366.926550] audit: type=1326 audit(1715656130.554:183): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7540caab19 code=0x7ffc0000
03:08:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000478000004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3366.964574] audit: type=1326 audit(1715656130.554:184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18910 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7540caab19 code=0x7ffc0000
[ 3366.995499] FAULT_INJECTION: forcing a failure.
[ 3366.995499] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3366.997667] CPU: 1 PID: 18930 Comm: syz-executor.0 Not tainted 5.10.216 #1
[ 3366.998662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3366.999848] Call Trace:
[ 3367.000245]  dump_stack+0x107/0x167
[ 3367.000771]  should_fail.cold+0x5/0xa
[ 3367.001337]  __alloc_pages_nodemask+0x182/0x600
[ 3367.002016]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3367.002875]  ? lock_downgrade+0x6d0/0x6d0
[ 3367.003495]  ? lock_acquire+0x197/0x470
[ 3367.004093]  alloc_pages_vma+0xbb/0x410
[ 3367.004694]  shmem_alloc_page+0x10f/0x1e0
[ 3367.005296]  ? shmem_init_inode+0x20/0x20
[ 3367.005930]  ? percpu_counter_add_batch+0x8b/0x140
[ 3367.006644]  ? __vm_enough_memory+0x184/0x360
[ 3367.007315]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 3367.008109]  ? shmem_unuse_inode+0xf60/0xf60
[ 3367.008982]  shmem_fallocate+0x78a/0xd30
[ 3367.009602]  ? shmem_evict_inode+0xa20/0xa20
[ 3367.010443]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3367.011288]  ? SOFTIRQ_verbose+0x10/0x10
[ 3367.011899]  ? lock_acquire+0x197/0x470
[ 3367.012480]  ? __x64_sys_fallocate+0xcf/0x140
[ 3367.013131]  ? lock_release+0x680/0x680
[ 3367.013714]  ? _cond_resched+0x12/0x80
[ 3367.014288]  ? selinux_file_permission+0x92/0x520
[ 3367.014993]  ? shmem_evict_inode+0xa20/0xa20
[ 3367.015642]  vfs_fallocate+0x48f/0xd00
[ 3367.016219]  __x64_sys_fallocate+0xcf/0x140
[ 3367.016848]  do_syscall_64+0x33/0x40
[ 3367.017553]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3367.018391] RIP: 0033:0x7f04eff10b19
[ 3367.019104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3367.021759] RSP: 002b:00007f04ed486188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 3367.022849] RAX: ffffffffffffffda RBX: 00007f04f0023f60 RCX: 00007f04eff10b19
[ 3367.023884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 3367.024903] RBP: 00007f04ed4861d0 R08: 0000000000000000 R09: 0000000000000000
[ 3367.025919] R10: 0000000000400004 R11: 0000000000000246 R12: 0000000000000003
[ 3367.026939] R13: 00007ffc6592ffcf R14: 00007f04ed486300 R15: 0000000000022000
03:09:08 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x1000000000, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x81, @none, 0x7900, 0x2}, 0xe)

03:09:08 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x4800000000000000)

03:09:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470020004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:08 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:08 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100)

03:09:08 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:08 executing program 7:
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x33, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x7, 0x4, 0x4}]}}, {0x0, 0x4e24, 0x8}}}}}, 0x0)

03:09:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x1, 0xffffffffffffffff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
chdir(&(0x7f0000000480)='./file0/../file0\x00')
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x40000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@mmap}]}})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000500))
stat(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(r3, 0x0, 0x0)
fadvise64(r1, 0x72, 0x0, 0x3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x2000080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}, {@privport}, {@access_user}, {@cache_mmap}, {@access_any}, {@access_any}, {@aname={'aname', 0x3d, '9p\x00'}}], [{@permit_directio}, {@uid_lt={'uid<', r3}}, {@appraise_type}]}})
vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000003c0)="8b2941f3f37d9ac65cef46cab1b945ace5f104358ef79c7943d7147c3fc7eb8716e7e0ac22f3eeb32520a919c3d028a50b05fe6b47d6307f55d90a7d82c9f6fab56ba5abddc0edd5a6b835f51526f6a9ab3e13e36ec83aca854e8d89680616bf0941979fabe414df6b815a3afe3756314015dd04f9bbd4b986641507924461d106a3b3c00cc7a42c58ccd6bf0bc9253c6e6e34cdc587dc4ca0aadfbf9ec7d21392069f89f9b689", 0xa7}], 0x1, 0x4)

03:09:08 executing program 7:
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="000040040000000085cf2e2f66696c6500cf515704a24ac9dde93000e53c6a1457c6f58763b436c9c09befbb93b6d2aca37ce80f9d0694497a88321d675417665d68ade2c22ed1621a482257c37697a437af8c28f39295e6b003a2a1bf5b255c63955ef98d410bcfc721cf2652db61bb6bf2de924114ca7ae4aa908449fa1b38734dc19a133aababbc06"])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}})
r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x84400, 0x0)
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580))
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8)
fsmount(r1, 0x1, 0x4)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0))
stat(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0xffffffffffffffff, r5, 0x0)
setresuid(r5, 0x0, 0x0)
fchownat(r2, &(0x7f0000000300)='./file0\x00', r5, 0xee00, 0x800)
mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)=ANY=[@ANYBLOB="6e616d653d2f6465762f736e617073686f74002c6e616d653d68756765746c622c616c6c2c6e6f6e652c6370757365745f76325f6d6f64652c78617474722c6e6f7072656669782c636cdfe7af084ab5f43bf36f6e655f6365746c622c66736e616d653d2f6465762f7a65726f002c736d61636b6673666c6f6f723d2e282b2d5e2c6f626a5f726f6c653d5e282c00c01bb33846a64ba66b96d1f8bafc523e011c45bb8386b1254b86bb32f5b5b695499776"])

03:09:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470030004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3384.558691] FAULT_INJECTION: forcing a failure.
[ 3384.558691] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3384.560070] CPU: 1 PID: 18958 Comm: syz-executor.4 Not tainted 5.10.216 #1
[ 3384.560827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3384.561727] Call Trace:
[ 3384.562028]  dump_stack+0x107/0x167
[ 3384.562440]  should_fail.cold+0x5/0xa
[ 3384.562867]  _copy_from_user+0x2e/0x1b0
[ 3384.563333]  __copy_msghdr_from_user+0x91/0x4b0
[ 3384.563864]  ? __ia32_sys_shutdown+0x80/0x80
[ 3384.564360]  ? SOFTIRQ_verbose+0x10/0x10
[ 3384.564812]  ? lock_downgrade+0x6d0/0x6d0
[ 3384.565284]  __io_recvmsg_copy_hdr+0xac/0x2f0
[ 3384.565783]  ? __io_compat_recvmsg_copy_hdr+0x360/0x360
[ 3384.566367]  ? find_held_lock+0x2c/0x110
[ 3384.566822]  ? __is_insn_slot_addr+0x123/0x290
[ 3384.567351]  io_recvmsg+0xae8/0xd70
[ 3384.567762]  ? lock_chain_count+0x20/0x20
[ 3384.568231]  ? io_sendmsg+0x830/0x830
[ 3384.568661]  ? __is_insn_slot_addr+0x14c/0x290
[ 3384.569165]  ? lock_chain_count+0x20/0x20
[ 3384.569623]  ? mark_lock+0xf5/0x2df0
[ 3384.570043]  ? register_lock_class+0xbb/0x17b0
[ 3384.570559]  ? arch_stack_walk+0x99/0xf0
[ 3384.571007]  ? lock_chain_count+0x20/0x20
[ 3384.571502]  ? __lock_acquire+0xbb1/0x5b00
[ 3384.571987]  ? __lock_acquire+0xbb1/0x5b00
[ 3384.572465]  io_issue_sqe+0x3bd6/0x7700
[ 3384.572911]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3384.573496]  ? SOFTIRQ_verbose+0x10/0x10
[ 3384.573953]  ? percpu_ref_put_many+0x153/0x2b0
[ 3384.574458]  ? io_connect+0x610/0x610
[ 3384.574883]  ? lock_acquire+0x197/0x470
[ 3384.575339]  ? find_held_lock+0x2c/0x110
[ 3384.575796]  ? __fget_files+0x26d/0x4c0
[ 3384.576241]  ? lock_downgrade+0x6d0/0x6d0
[ 3384.576711]  __io_queue_sqe+0x90/0x9d0
[ 3384.577148]  ? io_issue_sqe+0x7700/0x7700
[ 3384.577617]  io_submit_sqes+0x4461/0x85c0
[ 3384.578092]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3384.578639]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3384.579175]  ? lock_downgrade+0x6d0/0x6d0
[ 3384.579652]  ? find_held_lock+0x2c/0x110
[ 3384.580101]  ? io_submit_sqes+0x85c0/0x85c0
[ 3384.580581]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3384.581121]  ? wait_for_completion_io+0x270/0x270
[ 3384.581649]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3384.582157]  ? vfs_write+0x354/0xa70
[ 3384.582570]  ? fput_many+0x2f/0x1a0
[ 3384.582969]  ? ksys_write+0x1a9/0x260
[ 3384.583406]  ? __ia32_sys_read+0xb0/0xb0
[ 3384.583851]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3384.584423]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3384.584984]  do_syscall_64+0x33/0x40
[ 3384.585393]  entry_SYSCALL_64_after_hwframe+0x67/0xcc
[ 3384.585947] RIP: 0033:0x7fb2ae3d8b19
[ 3384.586356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3384.588342] RSP: 002b:00007fb2ab94e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3384.589175] RAX: ffffffffffffffda RBX: 00007fb2ae4ebf60 RCX: 00007fb2ae3d8b19
[ 3384.589944] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3384.590712] RBP: 00007fb2ab94e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3384.591506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 3384.592281] R13: 00007ffe9c210bbf R14: 00007fb2ab94e300 R15: 0000000000022000
03:09:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="34eee605620001000600000000000000000000000500000000000000150000809be149f8326500000ad022dea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9064d68a1d688cb564c5100107341e4378e1319a1cb91015718c602f3acaa0000000000000000000008cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15893a0dab9e300e7373804c0535b65ecb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9332637b2d2fc33f44c6cf32c6092540c897c293fb96c657b4b09e14750f3a3a639bddbde12e625613c06ff81608088aed67ddc4213a8ac10206e6970ca68d4eb170175ae2f4f82b8f754af3e19a1e4"], 0x34}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
r7 = eventfd2(0x8, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2})
io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0)
r8 = fsmount(r5, 0x1, 0x72)
execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E/\xc6\x17gB0Qim\x82u\x0fZ\xa9\x14\xf5\xc7X\xa9\x00\xb7\xaf\xcfouN\xbd\xb2\t^\xbe&~\xa7l\xfa\x036\x1c\"\x80\xfc/\x9b\x95\xf1!K\xc5{\xe7\xfdB[\xca\x87\x9bc\x98dg\x1a\xa1\xaa\xb4\x19\x7f\xa7\x90y\x9fq\xf5\x8a\xa9 \xa6\xdd\xf0+gb\xa6g\\\xec\tz\x06\xdf\x1a\x9c\xc9\xf7\xcc\x85\xb4G\xe9\xd3D\xf4\x8c\n\x17\xd5\x00\xf18\xb3T', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f0000000940)=']\xadt\xe0\r\xa3\xd7\xe8\x91\x90\n\x03_\x85\xa9\'E\xae\"\xeb]DE\xa3w\x8b\x94\xf7Yf\x03\x00\xd2:-\xab7\xd0\xf6\x0e\x903U\xe1\xe2\x8cS*HC\x17\xa0}@\xf4.\x87]\xed\x1f\x1e\xe8;\xfd\xee$\x8f\xba\xa5@\"\x93\xf7yR\x95z\x95\xc4\x03{\x11\xbe\xb3e\xb8B\x13\xa3uh\xcf\x11\xc7{Y\x0fp\x031\xb1/b_mq\x96\xccc\xa7\xbb\xb4T\x00J\xd7\xb8\n\xd4\xd9B\xa9\xec\xc5\xb5\x0e\xf1Q\x03\xbcX\x8d\xb2\xf6^\xb9\xc8\xa5\xdc\xa5\xcb\xde\xd3\xd03\xcc\xbe\xed\x9b\xbd\xcbb\x91\x98\x80\xe1X(t\xda\xd3F\x02\xa9\xa0\x81\xce;{\xfa\xba\xa3,{\xe87\xf6\x0f\xf9M\xb5mz', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000)
openat(r5, &(0x7f0000000240)='./file0\x00', 0x200, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r10 = dup2(r6, r5)
openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0)

[ 3384.673117] cgroup: Invalid name
[ 3384.732022] cgroup: Invalid name
03:09:21 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x2, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470040004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:21 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x8000000)
ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000280))
ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0))
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r5, 0x1, 0x0, 0x2, 0x5c386e8ea5293258, 0x1}, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x0, @private}})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2010, r5, 0x10000000)
syz_io_uring_submit(r1, r8, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f0000000300)={0x0, 0x3938700}, 0x1, 0x1}, 0xffffffff)
preadv(r7, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000240)=0x3)

03:09:21 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00')
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4)
readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00')
ioctl$FIONREAD(r2, 0x6801, 0x0)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0), &(0x7f0000000480)={'U-', 0xbef9}, 0x16, 0x1)
getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001640)=ANY=[@ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="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"])
getdents(r3, &(0x7f0000000380)=""/215, 0xd7)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7b000, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x900, 0x0)
getdents64(r4, &(0x7f0000001500)=""/125, 0x7d)
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0)
unshare(0x48020200)

03:09:21 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:09:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xbc, r4, 0xa00, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x2d}}}}, [@NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xb, 0x8}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x101}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_KEYS={0x5c, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4e69564e24badc1b941983f928"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ef524708f134104b5ffe19e28"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40014}, 0x40004)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0, 0xf60}, 0x1, 0x0, 0x0, 0xbc7e266b2077572e}, 0x80)
lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2)
io_setup(0x3e7, &(0x7f0000000580)=<r6=>0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
io_destroy(r6)

03:09:22 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x24}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x4c00000000000000)

03:09:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470050004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x3, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:22 executing program 7:
r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x3)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x3)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x2, 0x2, 0x6985)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="280000001800210c000000ddfeffffff020000000800fe06000000000000008005000000da000000"], 0x28}}, 0x0)
r4 = openat2(r3, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={0x52ac0, 0x107, 0x14}, 0x18)
ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0x7851669e)
getdents64(r3, &(0x7f0000000140)=""/255, 0xff)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x14}}, 0x4090)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e380)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x40, "2aee4ced9c0309"})
unshare(0x48020200)

03:09:22 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

[ 3398.644942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'.
03:09:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x6800000000000000)

03:09:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470060004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x4, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:09:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470070004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000003c000100000000000000000000000000050000000000000004000080b801fc8bf8ddbac142f6992887515365665124576362c0b58acca74542d298e85a75b95704c59d8ccbfba4e8e1545568"], 0x20}}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0xfffffffffffffe5a)
r2 = accept4(r0, &(0x7f00000000c0)=@tipc=@name, &(0x7f0000000040)=0x80, 0x800)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x289f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @mcast1, 0x7}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x6, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'})

[ 3399.109610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19064 comm=syz-executor.1
[ 3399.154048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19064 comm=syz-executor.1
03:09:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x5, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000003c000100000000000000000000000000050000000000000004000080b801fc8bf8ddbac142f6992887515365665124576362c0b58acca74542d298e85a75b95704c59d8ccbfba4e8e1545568"], 0x20}}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0xfffffffffffffe5a)
r2 = accept4(r0, &(0x7f00000000c0)=@tipc=@name, &(0x7f0000000040)=0x80, 0x800)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x289f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @mcast1, 0x7}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x6, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'})

03:09:37 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

03:09:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
r7 = mq_open(&(0x7f0000000040)='\x00', 0x800, 0x88, &(0x7f0000000080)={0xfffffffffffffffd, 0xffffffffffff8000, 0x6, 0x3184})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[r1, r0, r4, r1, r1, r7, r8, 0xffffffffffffffff, r9], 0x9, 0x0, 0x1}, 0xffffff73)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r10, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0xa000)=nil, 0xa000, 0x0, 0x80010, r1, 0x8000000)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:09:37 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000004c0)={{r0}, 0x935, 0x9, 0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000200), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)
sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0xe7a}], 0x2}, 0xc880)
[ 3413.481956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19091 comm=syz-executor.1
sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="0e00a30abf9d45c9a467133f6d0fcd2e77ef8b0695a12d6bfaca2e584adb871a63029718ae627ad6156ee41ae39bb4bd57ba26c6207e626e0fe6c26c2240b8ed43a5ee12539e4258fcfafe8e212b76566e72cbde82124f7628b6a91d244f467bd296ca1a39a935f5bed640aa0be2cb3361f96e91627e35f101edd5779cbeafd41e6ddcade209dea1b79668aea42b196404398f9e3398c34139e41fccdd5f557bd82276b50c414c4df6b874e4f2dd68c818f118d6296252a2a32bd136f561e25c8ffb16fbd5", 0xc5}, {&(0x7f0000000240)="d0d3402286ab3b4dba2b3f070c4e872763c2112e8812fee996be529e36382e990caebeea356427f97d4f7146f30e4b4bdecfc439ce32e3211673e7420eb5d4bb7f01fc2ac92867e21eecea642d63173c1a92c7c7094589a5441d035fbc0e", 0x5e}, {&(0x7f0000000700)="43e858a2153c983c45be54ad883c2b469325da99d87c7b8c75d05e5338b9b2f04e52d804203dd6b81c1e08c065c3906c52e5e1ea8e45242f46fa680db02247a4aaf253cc5ecfd83fb2d830a93dd0a60b2151fee5c964f250c869f342bf1614f00367428d3968e9fac6dd10cde471e8bb8d9d138383f1df79937cef6a45a0424332e5646564de3e129eb75fca555f9517a78b440d260ab386312c5fb49322840fae4dab290e76a89d38c31e6fffbe5dcc5ad8dd85bcb54f4a6d0d1031256d393d7dbd93829d43a41f65ab6645dd4db1bf0f25289445897721e3aa19f4d97422f9dfe49e06dfc8d9eb25d34317b95a46de976e673d50b1a1c93e0189b8a61e81ab7d64927b1761be9fba72a08eea8f87b352b7ae67a3b84658d98a88f8149c7b9956615351886482112ea33c581e6611fdcbd66d3c06b855851a96f41d2f49de730706a338a4b40c45ada86878f3728e69e563df97714de12bdef4302ca43b5ec83697a86d589442756317df1bf8693338404ae31423038323a3fcd2cfa4251cf49e58d1757cf28342f8c96df1581a17de02e1b982d2408c201b7c581660be0e3943c0ef4947b5a8e71ff56e9899b2ef616f04c9844c842bb5df8410142873a250aac2a0f576d58c79adc0b0b45df6a42f9e6019237db33f79a1422c37181d70376a4b72e2bf849084706bd27db6eba2ab0cddcd35c531661024536d4fc678457c43bf68e58dc2f794d88a4c68876b574fdd6086a9effea4cd548e2e1f90e6ba51dbba99cc548e1d73bcf0c7a38bdc6485dedf07986f8cc43e1f71be3b7c99bb15ea800c52e68c04031d56a7dd238eab1e98b112ca12dea98ebdc6637e7061a4d2523e05f4d3098927ea32a2b968cf82f2ed113081ead321b845c2", 0x27a}], 0x3}, 0x10040095)
sendmmsg$inet6(r2, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
r3 = pidfd_open(0x0, 0x0)
r4 = dup(r3)
setns(r4, 0x2020000)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
fork()

03:09:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470080004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x6c00000000000000)

03:09:37 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x30}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:37 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x36}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:37 executing program 7:
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000002c0)={0xd, 0xe, 0x17, 0x10, 0x0, 0x7ffd, 0x85, 0x71, 0x1})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[])
pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00')
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000003c0)={&(0x7f0000000380), &(0x7f00000004c0)=""/80, 0x50})

03:09:37 executing program 1:
syz_mount_image$iso9660(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x2000000, &(0x7f0000002540)={[{@session}]})

03:09:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x6, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:37 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(r4, 0x0, 0x0)
fchown(r3, r4, 0xee01)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:09:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470090004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:37 executing program 1:
creat(0x0, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80000)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)=ANY=[])
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x102)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x800)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_cmd={0x2}})

03:09:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x7, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700a0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:37 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x7400000000000000)

03:09:37 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x250e, 0x3407, 0x2, &(0x7f0000000280)={[0x81]}, 0x8)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)=""/92)
epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0)
mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'rose0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="0200000100860f00002f66696c653000"])
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000200)={0x1})
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0)
pidfd_open(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00')
syz_open_procfs(0x0, &(0x7f0000000140)='net/llc/socket\x00')
perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x1, 0x0, 0xb3, 0x19, 0x0, 0x80, 0x10000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3, 0x20}, 0x808, 0x88a, 0x5, 0x5, 0x7, 0x6, 0x1, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x3, r1, 0x3)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', &(0x7f0000000440), 0x0)

03:09:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700b0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:37 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0)

03:09:37 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {&(0x7f0000000380)="77680b6efa785849651ae3094403d3159b816787918144c8c6d80a7bc43c2f", 0x1f, 0x800}], 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6c75e2a314154950a97a2820ad32998bf28834c7e58e422e90e2101c54edcf5b62fd11960ff9406cd6f48eb9e63fa678737411ad7855eaf512ccbc97fcce8e643fc6b36daed372a2c9d2feb6b3cd8ca36c1d979a6b885f1aa053fb5c07f21a3d35b2adb1c79b039fcb27fd3a2a2366325170fe34f36ac806d4eb4109b75e17eb71245490fee1db45ad48a072763d0d81a1b9a3293b21"])
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xeef9eb4978dd837b, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2c77030000003dc0abf8da8738bc4441d2702a1005253655ed64f18d496b92a0c99d5fa02381f1539bb1a906969e76ddc25bec9c7cdabe4bc58ac9e74dbb4d2641613b65bf3d8bd4ec5a4da5ab71099bb8b3791822970088d370147fc1e588af1b485b512366e100000000000000", @ANYRESHEX=r0, @ANYBLOB=',loose,access=client,access=', @ANYRESDEC, @ANYBLOB=',version=9p2000.u,dfltuid=', @ANYRES64=r1, @ANYBLOB=',context=unconfined_u,subj_type=.-.^,subj_user=vfat\x00,dont_appraise,defcontext=user_u,audit,seclabel,seclabel,\x00'])
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20100, 0x1e4)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x101104, 0x0)
bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

03:09:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x8, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700d0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

[ 3414.026216] EXT4-fs (sda): re-mounted. Opts: (null)
03:09:37 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
preadv(r0, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/171, 0xab}], 0x5, 0x9, 0xe4e)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180)='debugfs\x00', 0x1, 0x0)

[ 3414.064236] EXT4-fs (sda): re-mounted. Opts: (null)
03:09:37 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x42}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:37 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64=r1])
r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
fcntl$notify(r0, 0x402, 0x80000045)
shutdown(r1, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0))
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb})
recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x1, 0x120, &(0x7f0000000340)={0x77359400})
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000380)=0x1)
socket$inet(0x2, 0x5, 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e04, @private=0xa010100}, 0x10)
unshare(0x48020200)

03:09:51 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r1 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
io_uring_enter(r1, 0x3626, 0x8, 0x1, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000880), 0x1)

03:09:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000680)=""/125, 0x7d}, {&(0x7f0000000700)=""/252, 0xfc}], 0x9)

03:09:51 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x60}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:51 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x9, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:51 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x7a00000000000000)

03:09:51 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x60ff, 0x0, 0x0, 0x0)

03:09:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700e0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:51 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0xfffffffe)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]})
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r0, &(0x7f0000000380))
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
fallocate(r1, 0x3, 0x0, 0x18000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r4 = dup2(r3, r2)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0)
sendfile(r5, r4, 0x0, 0x7ffffff9)

03:09:51 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x91}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:51 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0xa, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700f0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:09:51 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0xb, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:09:51 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1b1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:09:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(r0, 0x1000003)
poll(&(0x7f0000000180), 0x0, 0x5)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa6, 0x3b, 0x3, 0x8, 0x3, 0x2, 0x3e, 0x62cb, 0x3d1, 0x40, 0x0, 0x13f, 0x7fff, 0x38, 0x2, 0x200, 0x732, 0x5}, [{0x0, 0x5, 0xfffffffffffffff9, 0x7a, 0x7, 0xffffffffffffff80, 0x3, 0x80}, {0x7, 0x5102b852, 0x81, 0x4, 0x0, 0x6749, 0x0, 0x1ff}], "dcd83d5134a73089b9fe5f39122feb5e67a1a3b178ceb5e1d7e8e5aba4ea52fd68e7dba7af02e6bd83927af8d6544fddf3a70129a9a5e806101ae080e5034f0be9446f18ac9c4afd2829d9ae67d1d24e58592b372463e7aad0e01f8a8930c6be633d02574e0425c4d46e9e74f364d7f8c4287a8238665a7f11b00370b1b315b4cd718b9681eb330bef881c4adccb412093d9e80abe771b9cae5ff1481354614e8d9968adc853d77be293aafe45b31c1d19256ac1e9caba3d4bc327e1bce7849dc57d519203ccfd316974dd64c62508eb9f8ae2ddb398dceda21051a55331420021d306d2f69f9dc8b0819e", ['\x00', '\x00']}, 0x39b)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x6, 0xff})
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
write(r2, &(0x7f0000000100)='?', 0x1)
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r2, 0x6)
lseek(r2, 0x0, 0x1)
unshare(0x4a060400)

03:09:51 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0)

03:09:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470110004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:07 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xefee8fcf00000000)

03:10:07 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0)

03:10:07 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x293}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
syz_io_uring_setup(0x4e71, &(0x7f0000000040)={0x0, 0xf0d5, 0x4, 0x2, 0x280, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000240), 0x0, 0x0, 0x1}, 0x7fffffff)

03:10:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004702e0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:07 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0xc, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:07 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x300}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:07 executing program 1:
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x8, 0xeb247d25babd72d0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000180))
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000400)="e150d99dba27afdc0c6b678f56fbb105864873b49f0e1545187ce70773870d39fe2eaebf69a53a42e50442b8fd10ef3d5a952ee45969662098dfc3d35cc0de3de47850371f8a68e468a29cc5bcc193079be3cbbacc333285c43aa293cc01e9305cadc92d64c23080ff99ec65c9aa1de5185860337ca48ef23e8bd49cdb39fe3bbacce5b1fdb514e47322cd2cd8dede012ec7d79dfeeb9038df4df7cabe310d0be9e3aa5e721dfd1a78550b4e5ab812f6a9ae9e12", 0xb4}, {&(0x7f00000004c0)="00972d71a337b99cd68b76a81e61e5929f890e272142bc8d34ce40b5c78f8e5631aced8344e25995bfacd620350e66dd6578b5fddbb11db4321c18b485df00f4352e15969f28651a349422a9db37", 0x4e}, {&(0x7f0000000540)="2ca3fc4964505832449f18687e1e03c6532bb666e21112dea87071419b319954378b0b80883a0057de2fee682d636c1c6c7464c95fc4e5862c8a1a9e09d54b1f77aa7881c44392e5501a4fa7c1611ed8fcf068033505162b3ef5a6c7687c3eca31e44f8fa84317eaf064192036db92f9e2233070ba706795473b0e0d39fdefe76fbc9ecffefa1b8ec5f6016c7981f3870cd7a0e78f9216e8ddb50c9cb3f428ecc387e631a6b5759f01434f13965dd7b8a77158b64a8da36bf3b03db0ca6bc373f8aa39ca46764b220b4f1bfcc2694c37904ee3d658b3cec00c1ff53f60984b971613ad1aaa9c", 0xe6}, {&(0x7f0000000640)="b940e9e3deaa9f8dfd610a59e0ccfd16af95acf84c22e8dc96ebf430c988194604082ac6dbd1f2ff51b27acc8187aea4d689559f73328bb31670a6317cc5dfe28463ee2242cb3865b759559fa4aa19153ef380ed5c5087dca26cfa10b2281a0dd1d7f21172c3993489f32cb604f8743629b80acf713e2a436380befee70a9d73b1a945d57ec1574619ecc217b67d16199f2482c6701d78fe24db2d80a9aec12b761f68779f1e87c63390fb8fdd37ff07152e20f6e2665b2aa89c5da92399b1cca96fd8d0e679ed26661ab23390e6d24ccb70b3d6c6ded75294d621616773bcc454e4ba5559", 0xe5}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000840)="049192c8fdbaf7d2611eb74440ccbe9d9c450f1fd378fdf15d799aa55e5a97fa440a4fcb1f92b394816fe753dc93b1cb3f8422c157a9105ca3ae11df9aa0954e4f964966d7ca26e9658c6b33b944634e187f99f9efab63abece5d45c900aa9e4fecca7051ac375e499feb02e8cbbf2255104efe4f0212bf6ec9e51ffa035414f6eecea", 0x83}], 0x6, &(0x7f0000000980)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@end, @rr={0x7, 0x1f, 0x1b, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp_prespec={0x44, 0x34, 0x47, 0x3, 0x7, [{@multicast2, 0x1000}, {@rand_addr=0x64010102, 0x2}, {@remote, 0x1}, {@private=0xa010102}, {@local, 0x1}, {@rand_addr=0x64010101, 0x6000}]}, @generic={0x82, 0xe, "66f7c4be390d79736093765b"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xe7, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7fff}, {@broadcast, 0x7}, {@private=0xa010101, 0xff}, {@multicast2, 0x1ff}, {@remote, 0x6}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x74, 0x0, 0x7, {[@end, @ssrr={0x89, 0x7, 0xa5, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x13, 0x9b, [@dev={0xac, 0x14, 0x14, 0x31}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0x34, 0x48, 0x1, 0x6, [{@remote, 0x3f}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0x6}, {@rand_addr=0x64010102, 0x9}]}, @end, @noop, @ssrr={0x89, 0x7, 0xdc, [@local]}, @timestamp_addr={0x44, 0xc, 0x6f, 0x1, 0x1, [{@private=0xa010100, 0x3f}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x1c0}, 0x4)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x2, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="000000e62d2f66696c1000"])
r9 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000b40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000e40053090ac007aae0ceb36c000074c4e6da6332da3e902d0849dcf39d58de5a6182f7bc5881dc4e77de6c43a29fb4e0bd5bd53f62f602377e93d1566e6c63388a4eaf05a12fb6f55bc7d5aa8360ef8bd7ef2c9e57acacd3794356902d04ec87996574feb2aa063c6bad29878146619700000000"])
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @device_a, @device_a, @initial, {0x1, 0xaf5}}, @ver_80211n={0x0, 0xcc6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x37, @void}, 0x1e)

03:10:07 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
r1 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
io_uring_enter(r1, 0x3626, 0x8, 0x1, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000880), 0x1)

[ 3443.701652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:10:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470480004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:07 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0xd, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004704c0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:22 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x500}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xfeffffff00000000)

03:10:22 executing program 7:
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(r0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='hide,mode=0x0000000<00000100,uhd=', @ANYRESHEX=r0, @ANYBLOB=',norock,\x00'])
stat(0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0)
write$P9_RREADLINK(r1, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

03:10:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470680004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:22 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10)
socketpair(0xf93dee00fdf5209d, 0xa, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r6)

03:10:22 executing program 1:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x1, {0x0, r4}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(r5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:10:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0xb0ff20, 0x0, 0x0, 0x0)

03:10:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0xe, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:22 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0)
write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f)
syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00')
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffff, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f00000008c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)="b46bbf168897a0305b1cecb3b1335c3e91109073a66204938e87f949", 0x1c}, {&(0x7f0000001e00)="b6b4f84b285ebfa94a22e4dd1057f5067ac1d605bb164111e6e65211940029f560f97b4446a1531a21bcc9f3e0aefbb7f092541131c4792a414a3e12f3aaced8a6f3fa4c1a6fa458f3306be5e14dd2853c2241f2054167c26b0a52d384e0248d2b6fda471ce0a11643b84a3e404b73ba1d62eb0fb5a2418ee8f2e4b67a1f25dfe8e55aa7758d935a467bc0ade5e1e02f7b01ace877407dd5bb566022450f48a0d5c5df19e0879f5f44894136a9ff83597e24479ac99e1d997b1d90e54ff1bf351610d3ea45270fe1b0f9f5f43243afe7d82481d909aa8b01c144cc5520d4aee9fb5daa7d88c5a8d5a61e9e3069d53a9107d346dc162ea5056259d0a3a380bbf99e6e580cdabe5d14d2999a05a9b92a44b60cbd3e626114116190dd21c96c91353461cbbf45b8f67d928130b3aeda3d1cd4570e95962e2c2a2da58a1484e4ab3fc43edba9acb96826d62b7829815e8226842d74d3b5674001c722dbf7548be94046cb27e3c536091d8adfd9af2f0c47783b618f24cd14db0730d53b341810c993fd670c36228eea911a37857a98bb8d339d183b44e582520fa6166c4470e6b5adb5f326bedeb09a57beea082110fa33c9a0b6c3023364152b2d9da34aac83099b99feb4feb97d5fd4b45ee33c0879810554dc8811375a0e7a6e84ed832fa8e78a678f24f8029c46dd7738f8b96a3dcd569a118da5f3a62d105bbf149661cdd9c0628a50835f0154ae3f67774734465e33b4df446f23eb665283ce8df21afca69ca2a8a248e21cbd4c8ab48481ade40d4174a17b61c7c8b73dca1aaf0f5c995159d03f17251d2dce5d8649923dc5b740e9d0d5ce4f4f0ebdfbb55e24c1bee00a39da7c789d3275118a23ab00eb4f4a9263021cd0e2f90748f003dcf16eb05802a872b6a5d5c5202ffcc4f9c91ce213c8ba2552793dfa9bb82bdb594a782566943427976555b48adb454011fc4e91426bf1cff6e62bff4573066110be8c0234885e397afde0e3d57a58e377dce4951f3e26fd850e69a1fb0c48c699145e5c2d586aeaae83fe9fcbb554f62e31d26510d7628b14789b3980710134d75a3dc8b3dda21c792b6d2c9206719a9df5bd96e42657e5a92519217d9bcfcbd04dc739f37b754488c98a9732cd164c79c3c035cae37ec02481acf26d1e7f915609a4555ccd099f1e1e04266f9e5d5c694a18e4972b582d171c2d54c33330b657ed35bd81b0df5829e1a90dad2290954f63ce7ae925c04698badaff4686731b01cdc958e17fc6c5cddc169bef84db723490a048ed75d6ff814b3b04f24b5ca24e0e4d008e538df801fb25f663c18f565383cbd7a88c18619b6b1abdf48ba2681b0950da7a83b1bdf6daac620963fee63bc0ed9949acc3bfc89fcbf4beddab2e1fabf4f55fb33b8e0abb30f78b8c277f4b13ac1aea61f68226f36980f1da5c6a6373a1b91abd8d56b1d2574cd3d72fec3cf96a37fb7d7e59df7c5fd242bd330f3de7a2419f7fc05699a8de978151502daf0d5540baf8d051cc9901e4a5ad3b9b39fdf3681c544b0ee41d8448384b95b7890f74e122b3681b2cc412ab5380f91c70ffabe5be578de37e9b7b2fa87173982d9e227b1cb565be9c99049573ffa65f22427eca2185c868e9e09df7bd9311279f827bae6622f468402fa3de522d4ff52143ec399a47461617a66969d24fd2a6348cd40441772362c7504a34b45e76ed7b1541ace1e26795d9399e8fce7faf4e6807599a6cdd85ce8dd9d3b3aaf967dad8a970469bf21e7a659e65ec23bba1a5f73b8e08bd19d98d0747b6ccb0b66780c9c43813ae1e888ee77ca8f35c371a6e66b204e4250b8c843cddd29dc0da3940aac9fb9fbf5ab6f856bf5f354d9aa1abec227dc17fc67d45640249daa3ca17e9420d6a829824e37fd5cb39cc9afaa36acd0c6204407fe05f87805604ba3a806c11c7d727bfc5cfe2469af1a4b1c51a96122e95900c163d370898bcf9ca783d43e5f4d815f792f9ed88263037628a4c2022e37749aea045edea96d30b153c24673144d8d77c6fc112874555137cb089b9403a288464f2755e3244fa2c9c03052994694955b520d04d43705df75644f4c6514a902ad1a2290050b438e516419bb01c325f3a1a32a352aba474c238856c9b6a78f25ebb71f29fc6a1a25737805df0b3453b1c5b4b12da892d3d198e3f0dbb04959ce1a0c77f23fa01399c7eff9f3577b78c7f67d7c8835ee840db00bec175009862454c831a7f9822b41e12f8c8c157e117dc75bb54870195fad466ca4963fcef2854e38ea709723e4b2ba7f66507dd6fc67cc1cdd59232decd2adce926bd667cfed3a43d1eaf5ea66c3362e5d5587eb46f350fcc6dd6dfe62f3e4a1aa5ec503b35920ec7e3c687890bd6e59d26851d164b949ef9af2a0a6fdf0c57aaf3ae77a525fb8ae48aedd699f0a99376ccf9b8eb1fe6dbf2d6f3f9ae73a39d0f9c33c8b6e5660a1adf6ce64805d1f7fda31609cf14b1af9a0b12e0edacf57827683b3397e0c65d0e9be3824e82c7ef887b8dde57b18ca502880946300a74a70a26927c874a7d947fadd92ad362f278042d88d145417ec3075c585c9891071c2d4d083dd152f85deca6565d319cebd56798991e70defd376bfe7f1dfe0ed7dab49ec0fce5e9d4f64e495cceb761aa8bce4b13283502d6726c1d8e861a32a863c164cbb9e253eb884e511270047b8d051629d187611cbe2d5b36756ebedbb9cd0491c17afb76eefc8d12d2d929c1d2086203e8fabbbecdb7f246b991c056a5d08908f3927f1a8b137e5936ab60739946d71705754fcce5c15ac7d187c73da26fad0cdf274e7c2cfd1829de8bb6a73e1bda538128a0ccdcf8030867931780675b431dc6f98019c352f587f6a9b4f9c1319d8f997f0c6e5c351e212229d762ff777941bbc706db167f1b60ba4d415da778ac33bafbc6dcff9e64ccf14988cbb8366ccb7ed261701220ec07ac0d947da849b8de693a9c0b6c2b003f51fad1f4d5714102031110ce9a6f290ac520c056465738a451053802451f0829d28a0cd1efea988a4fa8c516a29df18f1790bfb7b0a703f7dc834561bbc251d1affab0e07c4bc68c2a69e9a6684247dbcf9723dcedb295c5e8a291d7eca950141368d3fd279c52c600d7220fa15c5ffcb9f8ddecfd9c3590e66259fcdc58e9108c14788b50836d957d8274227123df092577f4faa08745068a9497848cf96bef09c5baf4f259c1c7a4bd5d33daa3dcca8ff19fed650581c93bdd4515b7bc0120916588c0506c254c063fa507f941c00cf8bb1981f5754473faa7e7edb708550e5969c1e4fbb714e0fc71e02ce61a7dd1b3394f59c2b6da83d44ee71320ac2cffe89ab989f6cfb2f311011b62687bc6e4c1a07d99e35deccfe15ac39c749df73251f52b35fd507eca21d94fb596c4cde254a5ecff49f417215b94e943daaafa4aecaf22c7d4def50b34add53ebea868a82ee0979bb5e3e45faa9a48e7ddd340c7f8cda5fbb6a25056c2cd8c66ce3af2ade3cbca7e89f6e865ee36d9f9810e79ed82d32a854fbe000149c8b644852aa9fb809090059067ad3e1cdf9e3350cc595578e352adc8a4190680860a8580190b3dc832868dfd545ca9c25f7b2bebccea955c504745beee0e755bbbf7d129351637cbf2d9220628842ac1550c8ac853099294c0f9bbf1a282239b482313ebd03233990f10ff00d60a96089c3dbc24ea22e565cabab6b505d4a17d5567aa65153322a89c937bbb935f4b731e6f7898879de80d99027d105c9ea797e835d91b8ffdb2809253d2adaa8439c5e7b64f53fb91be2bdd70a536b6c096f4bc04fc64c6b2a757812dca108cbd5e46d1b84269bfe7baa300d46c0df7e6e871bb69e35706de05e7b824ec52ee47a25bfad0d186d764c537f09cb9682180370eb34d7c97739e917e418bdb2d52b6dc848f297107d6fb59f631700c5156f3d7a80585077598a728ed9bc0405f5e6a01a9125ef62fd12e1fa69b2fad2a4f1a5d80e46e1d884ac9a38e393c44e1f47ff4d7b5b7d4291246a24c437d29a573be01ad36787dada85d2e0988bb994336a80db732cdaf0d56bf3bf854040358c19eae5466d0186001b5b1d704b71fbc37ce0f7ec26a1e676735c588315ce4e7e0df658b182569b9599495a3261bf7f354cf984e7fd6ece2719e571b41774e89c28a80aaa6149c69d1cd45f87a36325b103995e4dbcf24a990c69b41110b239ac27fcf5f613421bd30a3a95a2199b8c9f9c6c8423458dd804f3930fb12ed213cd1b9687babb0669653b9b96a24efe6ae8043dbcbf8f7272691bd8a40a0095fba225eeb8959cde819707e2a3a8ecc26f036b69e71f1ed63dbb55fa0f6939676e3afb42ccf35782c31227e11ea701ab9a412b509935adef02b02374b76b8bf8c03e1f5c9bc8df93cfed30ec633dd490e9152b2dae14c6ac84a07fed5125c36833d5c3d2994c2b74dc91894876d7ee10157b56b600ecf92bbe54a9611021e49760ecaac2aca769393547d9f01b76153630d6b0ba1bb97a3eebcc2eb29559ce20d9a76786ae17193c1bc14a437672c4177259459931de86338878cb7320fb231ec3830b1b6ea4b86353addb36e37d58cc7b7f90ef3edcfd9cda95b19b0435c9eaa1568a05eb0770e746d7e01b9c24ee59bccc00a7e5031fa04622812e496dbc9259c6f163798d0f55bedd938150c6e6b19eb7780a5bc429c37a7012a222a0ffada1dd71e2759dbd4446ababb47591a7fe9652a510f269f07ff0396e7b602872a83da2449c4bce0d67563c993b68c0294ecdfb9be7a58e6ff0113f92d04f8a3ea9a6584295be06654df60f230eb70d39d95e1a75de63cf2b9e71ef7383a239d2c0b517112ec457cec1a05aeed254b3e632a6a8dbf84df824abda69a1fec44358bf9d7cb6db9d83315519719f1f5b11036254343842f9dae21a0187c4f9c8c6c2f9a39c342adfaed00c43a3c3e8e36c7d2ed2306402f79556aed9c70a33ba094ba74a7975f990b133893263df0bdd75f5492fee501eedd8664f0e50bd61dfa3a9d6f5e5741b42564ce64d52f6d0b5fcc0e2536d504fb1368f59febb3747a26189205dc6b46e006f16359684aaa8543c4c7c4d3e4a0605cb2b85593a3eab65a473cbbba1e93cdbad7069d53bc4f52daf16dd8031d0014bcb407fd072054d45795614e0e3da547d426cf187191236792c5cadbd11b229b4ccdc92f95c093277e074a804595d32c1cb51eea099d0823ab3d56d01d067ba646236d171d3df964dd0aca660b60567c12d9be4891b46152c98e431c4b8aa54e0542fb5f5995ef0451e7947481806c18f255fceab9ad03bd1b6d6e8650a423517d8ca9e60ed14d40ad7f3ee0b8d0310aa60de8be6b3b715a9df4f8c7dfb3391a30af01f5561266465aba6cee087650e360714821058a433e493cb1c203b8eb5e9c899d56f18d617dbd90b84656e78cee47999d2f7c9f22ac50b3df4afeeb5f33b0e0be0cb581fbeee2e16edd2d734251d86a2726d3955cad053fe3097cc59de3ffb5db68c665a1e52da4170a481a5598e5b10ff5d640366042c2af4dc68fe2618a705e76199cb34e768d9fe7b3f0437c76211233ea5107ed42fdf0afaa97a5facc23b42280f0540aaad5c031f566ca38861d99d0e0b0f3866772f7aa20c9daaf6211dad142beb959f6b329a8a175e586b55a225c5289815fd8ee7d751cdf67a80aab3c1be1f1e8275a4779bff8629068cd69a7ae94fcf6997f10aaa86e7754108df0ca8e588b27b69029edcf924d6c114d4501990f4807185790dfaf318ca6ed918111609d5426cf", 0x1000}, {&(0x7f0000000980)="ea864666e54c9d4dd7922f1b9745907edc4d96170543b1873aa01fdbc3410a2787e15e846a47e974e54aa53fd34d37736cc22e6220d83d5b0d31a9b257e7a2ae4260bd7ac347cd19b198347101b23cca4ddf4c166800db51fba94aba5d79d5c88cb90c70e953eecac7c1c422f7123e5272cc5350a02e2f76a6d7d40761347eb9abce3d6560d1d2c107dfd0432ffc18aec44ff57b87ec8e1aa0f135854b1cc9c006e7c511afd632294c6365264c1ec08ffac4c31031547f89b81ce5b0ff67226ec20bf00c835e299646b8ea159365b11897c57408d68c", 0xd6}, {&(0x7f0000000a80)="eb8e61d4a44a77b608c4f466e94b385c43b9def144d346395a389c725449a55a2eff4d5800eb0461309ea499428e6bca0da112423d1800268ea997e372f5845ba8e070c817837037ac7ea1bd132c6ff275117a78b739d1073a1b78b51a48dfcbf7b0ec998db9257ce31212c391205e609775e7fb939865b2fa4c1c174ce5240b3efab22f926b8220356c3b5d019e0acd9accf60a10581fc777184020ca11fa7f49bdb204d9801b7fe60ea4290a56554a3b33810ca0188835706c216415ad3b876d81b570", 0xc4}, {&(0x7f0000000b80)="f6dfa48e6139fb83f1e12795c80dcc178696ca279b2035a943e917b49cd9bda842ea", 0x22}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000001c00)="97a008d8eb76c81294724be9eb025b08548bccd8c2fcd4d59b528414ff9f67d8c074603796d7b8c04e2434bdda6f4c7923bcd3938e996096a673706c349345ef3d1aa0414e9a1b27e8f5343a26a7a26f1edec8e789870b63bf91decbb14d7826e26fc8f59cce7923092f0c5b689758ec7f8c0238e7978d15639b17f183ddecb5d25d921ed122e8f7743ee7494a682806d96003f1beecb4c9b0701c7d84e893c7a1a0346deb211082492a9f326e746a138933b7b3ed8cf26d65b1f6", 0xbb}], 0x7, &(0x7f0000003e00)=[{0xf0, 0x102, 0xff3, "fbaaeb607d785beab3bdb50209f32f9a865225b559bd8bd649d1e30c1f1cc96c3b68f2e13c5ce780b347ad9d285efc3095cb1b5b114e99dd7d150cefbebc35cf44f036b7fcf2728acde33c696a7a61c138bd564829097ffcb98edb524e5143489a17d5443de82fc5450136f35ddc022c66a2455c20e2b812796bf269b2c236d88746a4c9eed4c1bee31f8fc26b081cee7c35d48d924221b7c699ebc5d5f042b105fa26cbec9604b2df0843ef3293b3f7a0bf338f48daef165d09e149b21b1507e21a9024fde7503d3a02c42c68105408a8c9a32d41d73f36d12431b130ea5fae"}, {0xd8, 0x6, 0x1, "0e0c94ee5946a0dfaf8fd0877e0b65bb6ca9aeb8541ca2b431c5a7431ac228d10affec965ab7ac252c733301dece1e8954e3bbddd943fa88cb3caa2ab3cbb45bbfe4cfa04348b1ec62ea398c55d60c936417a427008c5079baa25890942804bcb65d9d5fb38bef6beedad1e4a35cc72159ba8c400f1509e9bdf0829206442a65c280d85efefd226e980e329b43952c000c928c04905afe3d763236a2cffa5c3d60e98689fb3b0321f65f608fdc99aa59e7a157dd5405d97f90dde21e0ef97ac26ec16028"}, {0x1010, 0x110, 0x3, "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"}], 0x11d8}, 0x40040)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0)
umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
unshare(0x48020200)

03:10:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0xf, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004706c0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0xffffffff00000000)

03:10:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0xf0ff1f, 0x0, 0x0, 0x0)

03:10:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470740004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x10, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:23 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x600}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004707a0004f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:23 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x11, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3468.650075] Bluetooth: hci5: command 0x0406 tx timeout
03:10:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x12, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:37 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000740)=""/137, 0x89}, {&(0x7f0000000200)=""/28, 0x1c}], 0x3, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r1, {0x80000000}}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="100026bd7008fedbdf2544000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000)
close_range(0xffffffffffffffff, r1, 0x2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x30000010}, 0x8000)
io_uring_enter(0xffffffffffffffff, 0x630a, 0xce52, 0x2, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0}, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20c180, 0x0)
read(r7, 0x0, 0x0)
r8 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x800)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x220040e, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="ff73120500006e", @ANYRESHEX=r8, @ANYBLOB=',access=', @ANYRESDEC=r6, @ANYBLOB=',privport,subj_user=!(,euid<', @ANYRESDEC=r6, @ANYBLOB="2c737547f35f757365723d33c967666f6e616c697479002c617569b7742c6673636f6e74656972656374696f2c7065726d69745f646972656374696f2c7065726d69745f646972656374696f2c0000000000000000000000000000000000fefcdaefd8e34adda9cb4f92c0d8ccda20b5765990207e"])
syz_open_procfs(r5, &(0x7f00000002c0)='personality\x00')

03:10:37 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x800c2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev}})
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d)
sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5e, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@generic="02e245c9ff"]}, 0x1c}}, 0x0)
sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x410}, 0x20008001)
creat(&(0x7f0000000040)='./file0\x00', 0x9)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:10:37 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0xd68, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'lo\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\xccF\xcd\xdd\x12h\xef:~\v\xe3\x96\x1f\x80\xe4N\xca\x03\xe5\x98\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbc\xa0\xcd\xeb\xea%\x10eW\xf6\xa0/\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xf4\xfb+~\xabu\xf9K\x1d\x00'/178, 0x2, 0x17, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x228cf4, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRESOCT])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="da44412cc8cde04e34681067ff94f420e4b7d7d4416e1ec020"], 0x1c}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000300)=0x3, 0x4)
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, r5, 0x0)
dup3(r1, r0, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x82001, 0x0)
ioctl$CDROM_LOCKDOOR(r6, 0x5329, 0x0)

03:10:37 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000160c00000000000000080002000000000000", @ANYRES32=0x0, @ANYBLOB="0c0011000000000000000000"], 0x28}}, 0x0)
close_range(r1, r0, 0x0)
perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0)
r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00')
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8001, 0x4)
add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2)
add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r6, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x4, r5, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0)
unshare(0x48020200)

03:10:37 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xc00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470120104f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:37 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x1ffff000, 0x0, 0x0, 0x0)

03:10:37 executing program 1:
r0 = timerfd_create(0x0, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000200)=""/236, 0xec}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00100020"], 0x58}, 0x41)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f0000000040)=0xb, 0x80000001)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0), 0x4)
dup2(r6, r7)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000480)={{0x0, 0x0, 0x8001, 0xe8f, 0x800, 0x6, 0x79a5, 0x5, 0x0, 0x90, 0x6e, 0x7fff, 0x1, 0x7fffffff, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0x7f, 0x1f, 0x0, 0x3, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x822}, 0x10020, 0x0, 0xdb3, 0x1, 0x9, 0x7, 0x69e, 0x0, 0x20, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r2, 0x2)
ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000000)={0x3f, 0x2, 0x1, 0x5, 0x8, 0x401})

03:10:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470300104f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:37 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:38 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x13, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470000304f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:52 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c41, 0x7a)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
copy_file_range(r1, &(0x7f0000000180)=0x2, r6, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

03:10:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'bridge0\x00', {}, 0x3})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r1, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}]}, 0x38}}, 0x0)

03:10:52 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

03:10:52 executing program 7:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendfile(r0, r1, &(0x7f0000000040)=0x865, 0x8)
r2 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r3 = io_uring_setup(0x20f1, &(0x7f0000000200))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
syz_io_uring_setup(0x33d1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000200))
io_uring_enter(r2, 0x7de1, 0x1180, 0x2, &(0x7f00000001c0)={[0xfffffffffffffffc]}, 0x8)

03:10:52 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x14, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r5, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040800}, 0x4804)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0)
r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000)
syz_io_uring_submit(r12, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:10:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x15, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:52 executing program 7:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80082}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x40)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"])
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204cc0, 0x304bb41edde9a9e6)

03:10:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470f90404f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:52 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x20ffb000, 0x0, 0x0, 0x0)

03:10:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x16, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:52 executing program 7:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(r0, 0xf4)
r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
ioctl$SG_IO(r1, 0x2285, 0x0)
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
r2 = signalfd(r1, &(0x7f0000000080)={[0x7fffffff]}, 0x8)
openat(r2, &(0x7f0000000100)='./file1\x00', 0x90043, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008e40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}})

03:10:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470000504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:10:52 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff, "33d19367fdff106140000000000000d9d10003", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r1 = mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r2 = socket$inet(0x2, 0xa, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r5, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r6 = open_tree(r4, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x28090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x840, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = dup3(r2, r0, 0x0)
dup3(r4, r7, 0x80000)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000300)=[{&(0x7f0000001cc0)=""/4094, 0xffe}], 0x1, 0x0, 0x202)
pidfd_getfd(r8, r4, 0x0)

03:10:52 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x17, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:52 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0xff600000, 0x0, 0x0, 0x0)

03:10:52 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x20ffb000, 0x0, 0x0, 0x0)

03:10:52 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1e00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:10:53 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x18, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:10:53 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8937, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000780)="9714042c2f44b692e6cf475ae00f7ce0a8c7bb8d326865691537bb63f9f3c88973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x56, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4, 0x1}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xc}], 0x80000, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES64=r5, @ANYRES64=r1, @ANYRESHEX=r2, @ANYRES32=0x0])
openat(r6, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r7 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

03:11:08 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

03:11:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r8 = io_uring_setup(0x20f1, &(0x7f0000000200))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0xff, 0x0, 0x1, 0x4, 0x1}, 0x7)
syz_io_uring_submit(r5, 0x0, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f00000001c0)=""/13, 0xd}], 0x4, &(0x7f0000000500)=""/171, 0xab}, 0x0, 0x10021, 0x1, {0x2}}, 0xfffffffa)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000680)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000640)=[r0], 0x1}, 0x3e)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r9, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000600)=@IORING_OP_NOP={0x0, 0x1}, 0x3)

03:11:08 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2400}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:11:08 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x19, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470050504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x101)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff)
close(r0)
r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0xce3, 0x80040)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x0, @unused=[0x0, 0xfffffffffffffffa, 0x101, 0xfffffffffffffffc], @devid=r3})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000800)={r3, "0816d50993bb9754f8b00dc56e20c539"})
open_by_handle_at(r1, &(0x7f0000000080)=@ocfs2={0xc, 0x1, {0x80, 0x9, 0x101}}, 0x8002)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="5d02ccc802b29730f0c31e1328a93fe868333260d1a8aaff20aa2656f15c936d25479405a749d61da3508b5bc594ff8517118fd84535be83d52e63d9fd5a3c40d93375bb9327e61cd53a0130a5888171ecbbc2c718e43331e286484bc817826e79845f1f3aa61fa8ce0b5b21f5df0df5e85751d8ce68fcf741437bab728ba45ced313e0515d91261dbf53c92fb4360eefa01018b9019802de9257ffc5a17ebfba0eb853dba9edb004a4748afaeb6ce09284b456797e6949198483eab439c8bcf5106e94e2572112bab8a6d5b75bab092304617901338665492f8d6337d133ec96ff7d49eb15f2f6fbd7ecb5ab1ee74b2d7303870aafd2578468a3716de5e8576eb98f164e8c8161ae047d1691ea88353508ac0ec1df3eb49fad7e9e8269065e211ee033ad10570d65f017ea413058e88f6712348b8c955118d5dc7963ee6a0b9ba99c409216303891ade9c8857a61874b76cc00b6313ad9f3d5d6903ee6c964ecc626e08614eb2287769ba5278f039b486df8d3b50fd8190aca1ec4be5ebaabb55869126e474e93abbe996f84495f8a5a55b9257b12490b85baabdf60f44be968edbaff8ab1dd5670f061ab2948bc85c4aadbd43a7f01d7617ec4ab36ece9540a462cbe3b70d25d14fc29f68b6258311c800e9d785239af1b1293564f040533d1f5cc4202ab15f5ba5be2d8c5c1b417e5005a1d6ed3da8a02381354511297d73", 0x200}, {&(0x7f0000000400)="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", 0x200}], 0x2)

03:11:08 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0)

03:11:08 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40030602}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xc8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4048000}, 0x2000c000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES16=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100"], 0x40}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000010000001800c7de000098a0c6351db2b1234d4752c2d6d96fbfdb7a6a72129bc632a48a9ff628afc0054c9e781d5b65be04e92364d3324711ab3d325c6718b9f8aa660bbf2d61a191a2b6f8ccbf73d0", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:11:08 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8937, &(0x7f00000000c0)={'wlan0\x00'})
fadvise64(0xffffffffffffffff, 0x800, 0x7838, 0x4)
ioctl$FIOCLEX(r4, 0x5451)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
accept4(r4, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00)
syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x7ff)
syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:11:08 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x1a, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470060504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:08 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

03:11:08 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r1)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
r2 = dup(r0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:v4l_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000091}, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004010}, 0x800)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'})
dup(r2)

03:11:08 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000}, 0x840, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

03:11:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470070504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:08 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0)

03:11:08 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x1b, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:22 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:11:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470080504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:22 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40030602}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xc8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4048000}, 0x2000c000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES16=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100"], 0x40}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000010000001800c7de000098a0c6351db2b1234d4752c2d6d96fbfdb7a6a72129bc632a48a9ff628afc0054c9e781d5b65be04e92364d3324711ab3d325c6718b9f8aa660bbf2d61a191a2b6f8ccbf73d0", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

03:11:22 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r3, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

03:11:22 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2a00}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:11:22 executing program 1:
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bf95a6", 0x4d, 0x11, 0x0, @private0, @remote, {[], {0x0, 0x0, 0x4d, 0x0, @wg=@data={0x4, 0x0, 0x0, "96a4a983df7e566f938f907c3be12e5ad3a367216872565766ed0b2cee73a8f8049ce0ab03a0a6e385950f5dbd5df35520ee85d108"}}}}}}}, 0x0)

03:11:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x1c, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x60ff, 0x0, 0x0)

03:11:22 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8)
ioctl$TCSBRKP(r0, 0x5425, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{r0}, 0x0, 0x12, @inherit={0x60, &(0x7f0000000080)={0x1, 0x3, 0x800, 0x3, {0x0, 0x3ff, 0x0, 0x3, 0x3f}, [0x3, 0x5, 0x8001]}}, @name="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"})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000001140)=0x1)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000001180)={0xd, 0x1000})
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000011c0)=',-\x00', &(0x7f0000001200)='./file1\x00', r1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001280)={'wlan0\x00', &(0x7f0000001240)=@ethtool_rxfh_indir={0x38, 0x3, [0x3, 0x5, 0x5168]}})
setxattr$security_evm(&(0x7f00000012c0)='./file1\x00', &(0x7f0000001300), &(0x7f0000001340)=@sha1={0x1, "a9c8729050153d479f43704a0b5486ef33d54805"}, 0x15, 0x2)
preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000001380)=""/99, 0x63}, {&(0x7f0000001400)=""/59, 0x3b}, {&(0x7f0000001440)=""/188, 0xbc}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/41, 0x29}, {&(0x7f0000002540)=""/75, 0x4b}], 0x6, 0x101, 0x3)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002640)={{0x1, 0x1, 0x18, <r4=>r0, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002680)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x3c4480, 0x20)
ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000002700)={0x6, 0x4, 0x9})
ioctl$TCGETA(r2, 0x5405, &(0x7f0000002740))
perf_event_open(&(0x7f00000027c0)={0x1, 0x80, 0x6, 0x7f, 0x20, 0x80, 0x0, 0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000002780), 0xc}, 0xd438, 0xabd7, 0x2, 0x2, 0x7, 0xc8, 0x9, 0x0, 0x53cf, 0x0, 0x8}, 0x0, 0x0, r5, 0x1)
fsetxattr(0xffffffffffffffff, &(0x7f0000002880)=@random={'btrfs.', ',-\x00'}, &(0x7f00000028c0)=',-\x00', 0x3, 0x1)

03:11:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x1d, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700a0504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:22 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2f3a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:11:22 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0)

03:11:22 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xbb0}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = pidfd_open(r0, 0x0)
r2 = dup(r1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_notify(r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
setpriority(0x0, 0x0, 0x200)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
close(r3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e3, 0x6a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x4000204)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100), 0x7ff)

03:11:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e666174002380010004700b0504f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:22 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x1e, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:36 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0)
r1 = socket$inet(0x2, 0xa, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_mount_image$nfs4(0x0, &(0x7f0000000340)='./file0\x00', 0x2, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000380)="9714042c2f44b67c8973eff928d57bca415fc49feadf84de253baae464c175496985221e93b50df5b1f641474c446c9700e55f4fc5e502f83976f105a1f81c2092b7e321ce", 0x45, 0x1}, {&(0x7f0000000400)="a918a2c13f0e6c00b8c682a186831ac68a77b5f442b85bec4bf05ba4e64aeb72f4d8cd4515599dc0cdfd01c106abcc61f74a151762299df2aac5d71d0cb03a5b75211dc830bef7228c1ad97ecc00d0d3a48267da94a8e518c20dfdd42479ba243222a67e55f75d8a60a65468957c695ce49e1978d958e7edc14e499710b0a4367492f56b397a9f3d37069a57efda213c60a6f43ab539d405d0c01b5e9652c9bec2e46e3201863a68eef99f09512877500c134ee48988a14b858d80f9c78ead9098dea7da624e97125cb15cba7af36bcfe8e5533abe6b1ab74dc67ff47c9bb55c9ad002ca68d57aa3297825883d2e03", 0xef}, {&(0x7f0000000500)="508d59e289fd60fcb1de09785c", 0xd, 0x1}, {&(0x7f0000000540)="e560c519", 0x4}, {0x0}, {&(0x7f00000005c0)="4ca1fd2f0ba88435ce1185646994fd332f4f178778b621edd44b7bfaf4789b957d9c71808ec2351b3fe42b203d089155ca0182c445fc8206cf6a375795ceb956b6ecb6070943128cfdc35583ce6dff563a69665d7289ae2818971afdb218c857d4d5e144991532b5315947faf6ba1e49daa7a5326f661496362bc790257fbe7c15a96d52b27bb9e9415e8eac3e60f340904e1de3a73ec016983a4cef4906f8f38e76bcc9804baa6866c86fd157ea49288a3c886151cc8c55bd572cc4a0125973d76ad0af01217a7f5272af405dbce2", 0xcf}], 0x80000, &(0x7f0000000cc0)=ANY=[])
openat(r4, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108)
r5 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x1000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x8c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x32200000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9f2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000100}, 0x48010)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup3(0xffffffffffffffff, r0, 0x80000)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

03:11:36 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:11:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470000604f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:36 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x1e, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:36 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x21, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:36 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0)

03:11:36 executing program 1:
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x5af)
unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
r5 = openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x4800, 0xa, 0x10}, 0x18)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000280))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "9656c75f04ba4d"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000004e600)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xff, "b170332b48bd09"})
mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86)
symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1)

03:11:36 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r8 = io_uring_setup(0x20f1, &(0x7f0000000200))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r6, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r9}}, 0x7)
r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x100, 0x2, 0x0, {0x0, r9, r10}}, 0xff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:11:36 executing program 3:
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x3600}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0))

03:11:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x22, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

03:11:37 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2a6b, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0x8a}}, 0x80000001)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

03:11:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400238001000470050604f8", 0x16}, {0x0, 0x0, 0x1e0}], 0x8000, &(0x7f0000000140))

03:11:37 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xc, @any, 0xd953, 0x1}, 0xe)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
write$binfmt_aout(r6, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x330)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xb0ff20, 0x0, 0x0)

03:11:37 executing program 7:
syz_io_uring_setup(0x1d85, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1100000}, &(0x7f0000dcc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001880), &(0x7f00000018c0))
r0 = syz_io_uring_setup(0x621, &(0x7f00000000c0)={0x0, 0x80f4, 0x20, 0x2, 0x277}, &(0x7f0000c92000/0x1000)=nil, &(0x7f0000c9f000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_setup(0x20f1, &(0x7f0000000200))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r1, 0x80, &(0x7f0000000280)=@x25, 0x0, 0x0, 0x1}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r1, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r5}}, 0x7)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r5)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x202400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000c92000/0x2000)=nil, 0x2000, 0x200001c, 0x1010, r8, 0x0)
io_uring_enter(0xffffffffffffffff, 0x69ea, 0x12cb, 0x2, &(0x7f0000000000)={[0x75cb]}, 0x8)

03:11:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x8}, 0x14}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x4, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x40}}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xad17}]}, 0x50}, 0x1, 0x0, 0x0, 0x48084}, 0x4000000)

03:11:37 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffdffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0)
memfd_create(&(0x7f00000002c0)='%}{.@^\x00', 0x0)
fallocate(r0, 0x23, 0x0, 0x400004)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2a02, 0x0)
socket$packet(0x11, 0x0, 0x300)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/current\x00')
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000540)=0x1000, 0xffffffffffffffff, &(0x7f00000005c0)=0x20, 0x0, 0x1)
syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xe420c, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x43d8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100, 0x1, 0x7, 0x0, 0x15c4c25cb, 0x7, 0x20, 0x0, 0xb, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x8)

[ 3543.195109] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3543.197439] CPU: 0 PID: 255 Comm: syz-fuzzer Not tainted 5.10.216 #1
[ 3543.198480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3543.199815] Call Trace:
[ 3543.200249]  dump_stack+0x107/0x167
[ 3543.200844]  dump_header+0x106/0x655
[ 3543.201462]  oom_kill_process.cold+0x10/0x15
[ 3543.202171]  out_of_memory+0x1149/0x1440
[ 3543.202840]  ? oom_killer_disable+0x280/0x280
[ 3543.203570]  ? mutex_trylock+0x237/0x2b0
[ 3543.204223]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3543.205176]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3543.206130]  ? lock_acquire+0xf7/0x470
[ 3543.206757]  ? warn_alloc+0x190/0x190
[ 3543.207399]  __alloc_pages_nodemask+0x51d/0x600
[ 3543.208140]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3543.209111]  ? find_get_entry+0x2c8/0x740
[ 3543.209784]  alloc_pages_current+0x187/0x280
[ 3543.210580]  __page_cache_alloc+0x2d2/0x360
[ 3543.211278]  pagecache_get_page+0x2c7/0xc80
[ 3543.211973]  filemap_fault+0x177d/0x2210
[ 3543.212630]  ? read_cache_page_gfp+0x30/0x30
[ 3543.213346]  ? replace_page_cache_page+0x1200/0x1200
[ 3543.214145]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3543.214984]  ext4_filemap_fault+0x87/0xc0
[ 3543.215640]  __do_fault+0x113/0x410
[ 3543.216226]  handle_mm_fault+0x1e53/0x3500
[ 3543.216907]  ? hrtimer_nanosleep+0x283/0x5d0
[ 3543.217614]  ? __pmd_alloc+0x5e0/0x5e0
[ 3543.218247]  ? vmacache_find+0x55/0x2a0
[ 3543.218893]  do_user_addr_fault+0x56e/0xc60
[ 3543.219577]  exc_page_fault+0xa2/0x1a0
[ 3543.220202]  ? asm_exc_page_fault+0x8/0x30
[ 3543.220871]  asm_exc_page_fault+0x1e/0x30
[ 3543.221524] RIP: 0033:0x455430
[ 3543.222027] Code: Unable to access opcode bytes at RIP 0x455406.
[ 3543.222964] RSP: 002b:000000c00003ff30 EFLAGS: 00010206
[ 3543.223777] RAX: 00000338ec16fc90 RBX: 000000c000030000 RCX: 0000000000000018
[ 3543.224879] RDX: 0000000000d55690 RSI: 000000c00003ff10 RDI: 0000000000000001
[ 3543.225983] RBP: 000000c00003ffa0 R08: 0000000000000dd7 R09: 00007ffe281e1080
[ 3543.227078] R10: 00007ffe281e1090 R11: 000000000065dfc2 R12: 0000000000438880
[ 3543.228176] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000
[ 3543.229472] Mem-Info:
[ 3543.229887] active_anon:4362 inactive_anon:60370 isolated_anon:0
[ 3543.229887]  active_file:7 inactive_file:29 isolated_file:0
[ 3543.229887]  unevictable:0 dirty:0 writeback:0
[ 3543.229887]  slab_reclaimable:8774 slab_unreclaimable:220085
[ 3543.229887]  mapped:69634 shmem:220 pagetables:2583 bounce:0
[ 3543.229887]  free:3106 free_pcp:91 free_cma:0
[ 3543.234958] Node 0 active_anon:17448kB inactive_anon:241480kB active_file:28kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:880kB writeback_tmp:0kB kernel_stack:5568kB all_unreclaimable? no
[ 3543.238538] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3543.242564] lowmem_reserve[]: 0 1616 1616 1616
[ 3543.244225] Node 0 DMA32 free:5932kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:17448kB inactive_anon:241480kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:10332kB bounce:0kB free_pcp:564kB local_pcp:244kB free_cma:0kB
[ 3543.249057] lowmem_reserve[]: 0 0 0 0
[ 3543.249780] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB
[ 3543.252080] Node 0 DMA32: 1430*4kB (UM) 14*8kB (UM) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5832kB
[ 3543.254126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3543.255445] 253 total pagecache pages
[ 3543.256032] 0 pages in swap cache
[ 3543.256595] Swap cache stats: add 0, delete 0, find 0/0
[ 3543.257445] Free swap  = 0kB
[ 3543.257934] Total swap = 0kB
[ 3543.258546] 524158 pages RAM
[ 3543.259016] 0 pages HighMem/MovableOnly
[ 3543.259811] 105062 pages reserved
[ 3543.260480] Unreclaimable slab info:
[ 3543.261648] Name                      Used          Total
[ 3543.262617] pid_3                      7KB          7KB
[ 3543.263482] pid_2                     80KB         82KB
[ 3543.264346] IEEE-802.15.4-MAC         63KB         63KB
[ 3543.265208] IEEE-802.15.4-RAW         63KB         63KB
[ 3543.266043] p9_req_t                   8KB          8KB
[ 3543.266898] ip6-frags                 15KB         15KB
[ 3543.267745] fib6_nodes                32KB         32KB
[ 3543.268613] ip6_dst_cache             41KB         41KB
[ 3543.269572] PINGv6                    63KB         63KB
[ 3543.270547] RAWv6                    409KB        409KB
[ 3543.271560] UDPLITEv6                 62KB         62KB
[ 3543.272584] UDPv6                     62KB         62KB
[ 3543.273618] tw_sock_TCPv6             15KB         15KB
[ 3543.274623] request_sock_TCPv6         15KB         15KB
[ 3543.275620] TCPv6                     62KB         62KB
[ 3543.276595] nf_conntrack              15KB         15KB
[ 3543.277572] scsi_sense_cache           4KB          4KB
[ 3543.278574] sd_ext_cdb                 3KB          3KB
[ 3543.279589] virtio_scsi_cmd           16KB         16KB
[ 3543.280601] sgpool-128               157KB        178KB
[ 3543.281448] sgpool-64                 63KB         63KB
[ 3543.282298] sgpool-32                128KB        204KB
[ 3543.283154] sgpool-16                 45KB         67KB
[ 3543.283973] sgpool-8                  33KB         33KB
[ 3543.284834] io_kiocb                 394KB        405KB
[ 3543.285688] mqueue_inode_cache         62KB         62KB
[ 3543.286540] nfs_commit_data           15KB         15KB
[ 3543.287376] nfs_write_data            47KB         47KB
[ 3543.288228] jbd2_inode                 7KB          7KB
[ 3543.289048] ext4_system_zone           7KB          7KB
[ 3543.289906] ext4_io_end_vec            7KB          7KB
[ 3543.290761] ext4_bio_post_read_ctx         15KB         15KB
[ 3543.291675] kioctx                    31KB         31KB
[ 3543.292528] aio_kiocb                  7KB          7KB
[ 3543.293385] dnotify_mark               7KB          7KB
[ 3543.294217] dnotify_struct             7KB          7KB
[ 3543.295025] dio                       46KB         46KB
[ 3543.295865] bio-2                      8KB          8KB
[ 3543.296689] fasync_cache               7KB          7KB
[ 3543.297536] pid_namespace              7KB          7KB
[ 3543.298378] posix_timers_cache         15KB         15KB
[ 3543.299223] rpc_buffers               31KB         31KB
[ 3543.300037] rpc_tasks                  3KB          3KB
[ 3543.300868] UNIX                     416KB        416KB
[ 3543.301705] ip4-frags                 15KB         15KB
[ 3543.302539] UDP-Lite                  63KB         63KB
[ 3543.303368] tcp_bind_bucket            8KB          8KB
[ 3543.304199] inet_peer_cache            8KB          8KB
[ 3543.305009] xfrm_state                32KB         32KB
[ 3543.305859] ip_fib_trie                8KB          8KB
[ 3543.306860] ip_fib_alias              19KB         19KB
[ 3543.307848] ip_dst_cache              60KB         60KB
[ 3543.308832] PING                      62KB         62KB
[ 3543.309829] RAW                      125KB        125KB
[ 3543.310659] UDP                      229KB        346KB
[ 3543.311496] tw_sock_TCP               15KB         15KB
[ 3543.312338] request_sock_TCP           7KB          7KB
[ 3543.313180] TCP                       60KB         60KB
[ 3543.313994] hugetlbfs_inode_cache         30KB         30KB
[ 3543.314892] bio-1                     11KB         11KB
[ 3543.315731] eventpoll_pwq             19KB         19KB
[ 3543.316574] eventpoll_epi             47KB         47KB
[ 3543.317422] inotify_inode_mark         97KB         97KB
[ 3543.318272] request_queue             60KB         60KB
[ 3543.319089] blkdev_ioc                48KB         48KB
[ 3543.320073] bio-0                    104KB        104KB
[ 3543.320899] biovec-max               433KB        505KB
[ 3543.321742] biovec-64                227KB        227KB
[ 3543.322577] biovec-16                 71KB         71KB
[ 3543.323401] user_namespace            31KB         31KB
[ 3543.324229] uid_cache                  8KB          8KB
[ 3543.325034] dmaengine-unmap-2          4KB          4KB
[ 3543.325880] audit_buffer               7KB          7KB
[ 3543.326716] skbuff_fclone_cache         90KB         90KB
[ 3543.327579] skbuff_head_cache        807KB       1057KB
[ 3543.328416] configfs_dir_cache          8KB          8KB
[ 3543.329266] file_lock_cache           59KB         59KB
[ 3543.330068] file_lock_ctx              7KB          7KB
[ 3543.330883] fsnotify_mark_connector         40KB         40KB
[ 3543.331797] net_namespace            201KB        201KB
[ 3543.332629] task_delay_info          116KB        127KB
[ 3543.333470] taskstats                 84KB         84KB
[ 3543.334305] proc_dir_entry           682KB        682KB
[ 3543.335125] pde_opener                55KB         55KB
[ 3543.335926] seq_file                  42KB         52KB
[ 3543.336747] sigqueue                  70KB         70KB
[ 3543.337579] shmem_inode_cache       1274KB       1415KB
[ 3543.338408] kernfs_iattrs_cache        243KB        243KB
[ 3543.339259] kernfs_node_cache       6659KB       6667KB
[ 3543.340055] mnt_cache                249KB        275KB
[ 3543.340902] filp                    1551KB       2287KB
[ 3543.341740] names_cache            10578KB      12227KB
[ 3543.342553] hashtab_node             274KB        274KB
[ 3543.343366] ebitmap_node            1149KB       1149KB
[ 3543.344176] avtab_node              4976KB       4976KB
[ 3543.344968] avc_node                  35KB         35KB
[ 3543.345800] lsm_inode_cache         3279KB       3328KB
[ 3543.346616] lsm_file_cache           101KB        200KB
[ 3543.347444] key_jar                   55KB         55KB
[ 3543.348255] uts_namespace             15KB         15KB
[ 3543.349047] nsproxy                   11KB         11KB
[ 3543.349898] vm_area_struct          1398KB       1696KB
[ 3543.350709] fs_cache                  86KB        108KB
[ 3543.351533] files_cache              398KB        398KB
[ 3543.352353] signal_cache             414KB        679KB
[ 3543.353184] sighand_cache            400KB        420KB
[ 3543.353986] task_struct             1732KB       2100KB
[ 3543.354812] cred_jar                 158KB        196KB
[ 3543.355639] anon_vma_chain           369KB        413KB
[ 3543.356453] anon_vma                 391KB        414KB
[ 3543.357310] pid                       77KB        101KB
[ 3543.358124] Acpi-Operand             144KB        178KB
[ 3543.358909] Acpi-ParseExt             27KB         27KB
[ 3543.359717] Acpi-Parse               177KB        193KB
[ 3543.360533] Acpi-State               192KB        208KB
[ 3543.361353] Acpi-Namespace            24KB         24KB
[ 3543.362164] numa_policy                7KB          7KB
[ 3543.362940] trace_event_file         176KB        176KB
[ 3543.363744] ftrace_event_field        280KB        280KB
[ 3543.364557] pool_workqueue            48KB         48KB
[ 3543.365365] task_group                16KB         16KB
[ 3543.366171] mm_struct                402KB        567KB
[ 3543.366948] vmap_area                181KB        181KB
[ 3543.367753] page->ptl                330KB        362KB
[ 3543.368554] kmemleak_scan_area        167KB        167KB
[ 3543.369377] kmemleak_object       656563KB     656563KB
[ 3543.370197] kmalloc-8k              5488KB       5632KB
[ 3543.370991] kmalloc-4k              9440KB      11072KB
[ 3543.371803] kmalloc-2k              7048KB       7520KB
[ 3543.372609] kmalloc-1k              3070KB       3424KB
[ 3543.373416] kmalloc-512            23748KB      23748KB
[ 3543.374230] kmalloc-256             1593KB       1632KB
[ 3543.375013] kmalloc-192              653KB        676KB
[ 3543.375824] kmalloc-128              624KB        644KB
[ 3543.376653] kmalloc-96               668KB       1056KB
[ 3543.377494] kmalloc-64              1153KB       1504KB
[ 3543.378299] kmalloc-32             74488KB      74488KB
[ 3543.379079] kmalloc-16               364KB        396KB
[ 3543.379887] kmalloc-8                313KB        354KB
[ 3543.380693] kmem_cache_node           47KB         47KB
[ 3543.381507] kmem_cache                78KB         78KB
[ 3543.382309] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=255,uid=0
[ 3543.386000] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1240980kB, anon-rss:218744kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:912kB oom_score_adj:0
[ 3545.446108] oom_reaper: reaped process 19727 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 3553.067874] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000
[ 3553.068798] CPU: 0 PID: 114 Comm: systemd-udevd Not tainted 5.10.216 #1
[ 3553.069361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3553.070044] Call Trace:
[ 3553.070278]  dump_stack+0x107/0x167
[ 3553.070587]  dump_header+0x106/0x655
[ 3553.070903]  oom_kill_process.cold+0x10/0x15
[ 3553.071286]  out_of_memory+0x358/0x1440
[ 3553.071624]  ? oom_killer_disable+0x280/0x280
[ 3553.072011]  ? mutex_trylock+0x237/0x2b0
[ 3553.072354]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3553.072854]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3553.073363]  ? lock_acquire+0xf7/0x470
[ 3553.073694]  ? warn_alloc+0x190/0x190
[ 3553.074029]  __alloc_pages_nodemask+0x51d/0x600
[ 3553.074422]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3553.074931]  ? find_get_entry+0x2c8/0x740
[ 3553.075289]  alloc_pages_current+0x187/0x280
[ 3553.075667]  __page_cache_alloc+0x2d2/0x360
[ 3553.076034]  pagecache_get_page+0x2c7/0xc80
[ 3553.076403]  filemap_fault+0x177d/0x2210
[ 3553.076752]  ? read_cache_page_gfp+0x30/0x30
[ 3553.077132]  ? replace_page_cache_page+0x1200/0x1200
[ 3553.077566]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3553.078016]  ext4_filemap_fault+0x87/0xc0
[ 3553.078369]  __do_fault+0x113/0x410
[ 3553.078681]  handle_mm_fault+0x1e53/0x3500
[ 3553.079056]  ? __pmd_alloc+0x5e0/0x5e0
[ 3553.079391]  ? vmacache_find+0x55/0x2a0
[ 3553.079717]  ? vmacache_update+0xce/0x140
[ 3553.080060]  do_user_addr_fault+0x56e/0xc60
[ 3553.080434]  exc_page_fault+0xa2/0x1a0
[ 3553.080767]  ? asm_exc_page_fault+0x8/0x30
[ 3553.081127]  asm_exc_page_fault+0x1e/0x30
[ 3553.081482] RIP: 0033:0x7f10e58cb0d6
[ 3553.081796] Code: Unable to access opcode bytes at RIP 0x7f10e58cb0ac.
[ 3553.082346] RSP: 002b:00007ffe88de4d88 EFLAGS: 00010246
[ 3553.082792] RAX: 0000000000000001 RBX: 000055fda78a1590 RCX: 00007f10e58cb0d6
[ 3553.083389] RDX: 000000000000000a RSI: 000055fda810e700 RDI: 000000000000000a
[ 3553.083986] RBP: ffffffffffffffff R08: 000000000000000a R09: 00007ffe88dec080
[ 3553.084580] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001
[ 3553.085182] R13: 000000000000000a R14: 000055fda72de2e6 R15: 0000000000000000
[ 3553.085935] Mem-Info:
[ 3553.086187] active_anon:35 inactive_anon:7320 isolated_anon:0
[ 3553.086187]  active_file:6 inactive_file:0 isolated_file:0
[ 3553.086187]  unevictable:0 dirty:0 writeback:0
[ 3553.086187]  slab_reclaimable:6776 slab_unreclaimable:351810
[ 3553.086187]  mapped:8706 shmem:72 pagetables:298 bounce:0
[ 3553.086187]  free:2775 free_pcp:212 free_cma:0
[ 3553.088799] Node 0 active_anon:140kB inactive_anon:29280kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:288kB writeback_tmp:0kB kernel_stack:3584kB all_unreclaimable? yes
[ 3553.090704] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3553.092898] lowmem_reserve[]: 0 1616 1616 1616
[ 3553.093329] Node 0 DMA32 free:4608kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:140kB inactive_anon:29280kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:1192kB bounce:0kB free_pcp:848kB local_pcp:592kB free_cma:0kB
[ 3553.095716] lowmem_reserve[]: 0 0 0 0
[ 3553.096061] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB
[ 3553.097298] Node 0 DMA32: 1152*4kB (UME) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4608kB
[ 3553.098350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3553.099058] 83 total pagecache pages
[ 3553.099388] 0 pages in swap cache
[ 3553.099682] Swap cache stats: add 0, delete 0, find 0/0
[ 3553.100145] Free swap  = 0kB
[ 3553.100403] Total swap = 0kB
[ 3553.100661] 524158 pages RAM
[ 3553.100912] 0 pages HighMem/MovableOnly
[ 3553.101271] 105062 pages reserved
[ 3553.101568] Unreclaimable slab info:
[ 3553.101885] Name                      Used          Total
[ 3553.102371] pid_3                      7KB          7KB
[ 3553.102820] pid_2                     79KB         82KB
[ 3553.103287] IEEE-802.15.4-MAC         63KB         63KB
[ 3553.103739] IEEE-802.15.4-RAW         63KB         63KB
[ 3553.104212] p9_req_t                   8KB          8KB
[ 3553.104660] ip6-frags                 15KB         15KB
[ 3553.105127] fib6_nodes                32KB         32KB
[ 3553.105581] ip6_dst_cache             41KB         41KB
[ 3553.106027] PINGv6                    63KB         63KB
[ 3553.106491] RAWv6                    409KB        409KB
[ 3553.106940] UDPLITEv6                 62KB         62KB
[ 3553.107404] UDPv6                     62KB         62KB
[ 3553.107851] tw_sock_TCPv6             15KB         15KB
[ 3553.108311] request_sock_TCPv6         15KB         15KB
[ 3553.108769] TCPv6                     62KB         62KB
[ 3553.109234] nf_conntrack              15KB         15KB
[ 3553.109707] scsi_sense_cache           4KB          4KB
[ 3553.110179] sd_ext_cdb                 3KB          3KB
[ 3553.110621] virtio_scsi_cmd           16KB         16KB
[ 3553.111078] sgpool-128               157KB        178KB
[ 3553.111551] sgpool-64                 63KB         63KB
[ 3553.112000] sgpool-32                113KB        220KB
[ 3553.112467] sgpool-16                 82KB         82KB
[ 3553.112917] sgpool-8                  45KB         45KB
[ 3553.113385] io_kiocb                  74KB         86KB
[ 3553.113836] mqueue_inode_cache         62KB         62KB
[ 3553.114314] nfs_commit_data           15KB         15KB
[ 3553.114764] nfs_write_data            47KB         47KB
[ 3553.115230] jbd2_inode                 7KB          7KB
[ 3553.115681] ext4_system_zone           7KB          7KB
[ 3553.116145] ext4_io_end_vec            7KB          7KB
[ 3553.116594] ext4_bio_post_read_ctx         15KB         15KB
[ 3553.117073] kioctx                    31KB         31KB
[ 3553.117545] aio_kiocb                  7KB          7KB
[ 3553.117995] dnotify_mark               7KB          7KB
[ 3553.118464] dnotify_struct             7KB          7KB
[ 3553.118911] dio                       46KB         46KB
[ 3553.119378] bio-2                      8KB          8KB
[ 3553.119829] fasync_cache               7KB          7KB
[ 3553.120292] pid_namespace              7KB          7KB
[ 3553.120742] posix_timers_cache         15KB         15KB
[ 3553.121220] rpc_buffers               31KB         31KB
[ 3553.121676] rpc_tasks                  3KB          3KB
[ 3553.122143] UNIX                     416KB        416KB
[ 3553.122593] ip4-frags                 15KB         15KB
[ 3553.123040] UDP-Lite                  63KB         63KB
[ 3553.123507] tcp_bind_bucket            8KB          8KB
[ 3553.123958] inet_peer_cache            8KB          8KB
[ 3553.124434] xfrm_state                32KB         32KB
[ 3553.124888] ip_fib_trie                8KB          8KB
[ 3553.125364] ip_fib_alias              19KB         19KB
[ 3553.125817] ip_dst_cache              60KB         60KB
[ 3553.126289] PING                      62KB         62KB
[ 3553.126740] RAW                      125KB        125KB
[ 3553.127204] UDP                      227KB        346KB
[ 3553.127654] tw_sock_TCP               15KB         15KB
[ 3553.128116] request_sock_TCP           7KB          7KB
[ 3553.128565] TCP                       60KB         60KB
[ 3553.129010] hugetlbfs_inode_cache         30KB         30KB
[ 3553.129512] bio-1                     11KB         11KB
[ 3553.129961] eventpoll_pwq             19KB         19KB
[ 3553.130426] eventpoll_epi             47KB         47KB
[ 3553.130876] inotify_inode_mark         97KB         97KB
[ 3553.131345] request_queue             60KB         60KB
[ 3553.131800] blkdev_ioc                48KB         48KB
[ 3553.132274] bio-0                    168KB        168KB
[ 3553.132724] biovec-max              1160KB       1160KB
[ 3553.133192] biovec-64                157KB        236KB
[ 3553.133656] biovec-16                 78KB         78KB
[ 3553.134124] user_namespace            31KB         31KB
[ 3553.134576] uid_cache                  8KB          8KB
[ 3553.135025] dmaengine-unmap-2          4KB          4KB
[ 3553.135493] audit_buffer               7KB          7KB
[ 3553.135944] skbuff_fclone_cache         90KB         90KB
[ 3553.136439] skbuff_head_cache        508KB        656KB
[ 3553.136890] configfs_dir_cache          8KB          8KB
[ 3553.137366] file_lock_cache           59KB         59KB
[ 3553.137817] file_lock_ctx              7KB          7KB
[ 3553.138281] fsnotify_mark_connector         40KB         40KB
[ 3553.138773] net_namespace            161KB        201KB
[ 3553.139239] task_delay_info          113KB        127KB
[ 3553.139686] taskstats                 84KB         84KB
[ 3553.140155] proc_dir_entry           646KB        675KB
[ 3553.140604] pde_opener                55KB         55KB
[ 3553.141051] seq_file                  56KB         56KB
[ 3553.141524] sigqueue                  70KB         70KB
[ 3553.141977] shmem_inode_cache       1214KB       1415KB
[ 3553.142447] kernfs_iattrs_cache        243KB        243KB
[ 3553.142934] kernfs_node_cache       5993KB       6224KB
[ 3553.143401] mnt_cache                127KB        165KB
[ 3553.143866] filp                    1055KB       1477KB
[ 3553.144332] names_cache             6175KB       6396KB
[ 3553.144782] hashtab_node             274KB        274KB
[ 3553.145255] ebitmap_node            1149KB       1149KB
[ 3553.145707] avtab_node              4976KB       4976KB
[ 3553.146175] avc_node                  35KB         35KB
[ 3553.146654] lsm_inode_cache         2532KB       3008KB
[ 3553.147126] lsm_file_cache            92KB        176KB
[ 3553.147574] key_jar                   55KB         55KB
[ 3553.148024] uts_namespace             15KB         15KB
[ 3553.148491] nsproxy                   11KB         11KB
[ 3553.148982] vm_area_struct           830KB       1316KB
[ 3553.149457] fs_cache                  81KB        108KB
[ 3553.149907] files_cache              398KB        398KB
[ 3553.150376] signal_cache             334KB        586KB
[ 3553.150826] sighand_cache            339KB        420KB
[ 3553.151336] task_struct             1023KB       1575KB
[ 3553.151791] cred_jar                  86KB        164KB
[ 3553.152263] anon_vma_chain           198KB        318KB
[ 3553.152718] anon_vma                 172KB        243KB
[ 3553.153183] pid                       75KB        101KB
[ 3553.153643] Acpi-Operand             144KB        178KB
[ 3553.154113] Acpi-ParseExt             27KB         27KB
[ 3553.154566] Acpi-Parse               177KB        193KB
[ 3553.155019] Acpi-State               192KB        208KB
[ 3553.155491] Acpi-Namespace            24KB         24KB
[ 3553.155940] numa_policy                7KB          7KB
[ 3553.156405] trace_event_file         176KB        176KB
[ 3553.156855] ftrace_event_field        280KB        280KB
[ 3553.157343] pool_workqueue            48KB         48KB
[ 3553.157794] task_group                16KB         16KB
[ 3553.158275] mm_struct                343KB        535KB
[ 3553.158726] vmap_area                181KB        181KB
[ 3553.159198] page->ptl                210KB        299KB
[ 3553.159651] kmemleak_scan_area        167KB        167KB
[ 3553.160124] kmemleak_object      1092493KB    1092493KB
[ 3553.160591] kmalloc-8k              4080KB       4512KB
[ 3553.161061] kmalloc-4k              8360KB      10272KB
[ 3553.161550] kmalloc-2k              6116KB       7360KB
[ 3553.162011] kmalloc-1k              2986KB       3424KB
[ 3553.162481] kmalloc-512            38068KB      38068KB
[ 3553.162944] kmalloc-256             1476KB       1656KB
[ 3553.163418] kmalloc-192              644KB        676KB
[ 3553.163869] kmalloc-128              580KB        644KB
[ 3553.164362] kmalloc-96               383KB        976KB
[ 3553.164845] kmalloc-64               936KB       1484KB
[ 3553.165317] kmalloc-32            141444KB     141444KB
[ 3553.165767] kmalloc-16               361KB        396KB
[ 3553.166240] kmalloc-8                296KB        354KB
[ 3553.166687] kmem_cache_node           47KB         47KB
[ 3553.167150] kmem_cache                78KB         78KB
[ 3553.167612] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=19761,uid=0
[ 3553.169585] Out of memory: Killed process 19761 (systemd-udevd) total-vm:35620kB, anon-rss:10180kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0
[ 3553.484132] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250
[ 3553.485014] CPU: 1 PID: 103 Comm: systemd-journal Not tainted 5.10.216 #1
[ 3553.485586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3553.486271] Call Trace:
[ 3553.486493]  dump_stack+0x107/0x167
[ 3553.486798]  dump_header+0x106/0x655
[ 3553.487112]  oom_kill_process.cold+0x10/0x15
[ 3553.487485]  out_of_memory+0x1149/0x1440
[ 3553.487829]  ? oom_killer_disable+0x280/0x280
[ 3553.488205]  ? mutex_trylock+0x237/0x2b0
[ 3553.488535]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3553.489028]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3553.489532]  ? lock_acquire+0xf7/0x470
[ 3553.489851]  ? warn_alloc+0x190/0x190
[ 3553.490177]  __alloc_pages_nodemask+0x51d/0x600
[ 3553.490557]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3553.491045]  ? find_get_entry+0x2c8/0x740
[ 3553.491388]  alloc_pages_current+0x187/0x280
[ 3553.491747]  __page_cache_alloc+0x2d2/0x360
[ 3553.492108]  pagecache_get_page+0x2c7/0xc80
[ 3553.492465]  filemap_fault+0x177d/0x2210
[ 3553.492803]  ? read_cache_page_gfp+0x30/0x30
[ 3553.493165]  ? replace_page_cache_page+0x1200/0x1200
[ 3553.493585]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3553.494027]  ext4_filemap_fault+0x87/0xc0
[ 3553.494370]  __do_fault+0x113/0x410
[ 3553.494671]  handle_mm_fault+0x1e53/0x3500
[ 3553.495019]  ? find_held_lock+0x2c/0x110
[ 3553.495357]  ? __pmd_alloc+0x5e0/0x5e0
[ 3553.495680]  ? vmacache_find+0x55/0x2a0
[ 3553.496011]  do_user_addr_fault+0x56e/0xc60
[ 3553.496370]  exc_page_fault+0xa2/0x1a0
[ 3553.496687]  ? asm_exc_page_fault+0x8/0x30
[ 3553.497039]  asm_exc_page_fault+0x1e/0x30
[ 3553.497384] RIP: 0033:0x7f64a9aa112a
[ 3553.497689] Code: Unable to access opcode bytes at RIP 0x7f64a9aa1100.
[ 3553.498226] RSP: 002b:00007ffd80e4e540 EFLAGS: 00010297
[ 3553.498662] RAX: 0000000000000000 RBX: 00005650af45f360 RCX: 00007f64a9aa1116
[ 3553.499237] RDX: 0000000000000014 RSI: 00005650af4658e0 RDI: 0000000000000000
[ 3553.499811] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffd80fcd080
[ 3553.500391] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000001
[ 3553.500963] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000
[ 3553.501616] Mem-Info:
[ 3553.501831] active_anon:35 inactive_anon:7197 isolated_anon:0
[ 3553.501831]  active_file:0 inactive_file:0 isolated_file:0
[ 3553.501831]  unevictable:0 dirty:0 writeback:0
[ 3553.501831]  slab_reclaimable:6776 slab_unreclaimable:351935
[ 3553.501831]  mapped:8710 shmem:72 pagetables:282 bounce:0
[ 3553.501831]  free:2895 free_pcp:62 free_cma:0
[ 3553.504369] Node 0 active_anon:140kB inactive_anon:28788kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:0kB writeback:0kB shmem:288kB writeback_tmp:0kB kernel_stack:3552kB all_unreclaimable? yes
[ 3553.506191] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3553.508297] lowmem_reserve[]: 0 1616 1616 1616
[ 3553.508689] Node 0 DMA32 free:5088kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:140kB inactive_anon:28788kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:1128kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB
[ 3553.510967] lowmem_reserve[]: 0 0 0 0
[ 3553.511312] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB
[ 3553.512453] Node 0 DMA32: 1222*4kB (UME) 43*8kB (UM) 3*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5312kB
[ 3553.513577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3553.514268] 99 total pagecache pages
[ 3553.514568] 0 pages in swap cache
[ 3553.514846] Swap cache stats: add 0, delete 0, find 0/0
[ 3553.515286] Free swap  = 0kB
[ 3553.515533] Total swap = 0kB
[ 3553.515777] 524158 pages RAM
[ 3553.516023] 0 pages HighMem/MovableOnly
[ 3553.516356] 105062 pages reserved
[ 3553.516633] Unreclaimable slab info:
[ 3553.516934] Name                      Used          Total
[ 3553.517401] pid_3                      7KB          7KB
[ 3553.517834] pid_2                     79KB         82KB
[ 3553.518278] IEEE-802.15.4-MAC         63KB         63KB
[ 3553.518707] IEEE-802.15.4-RAW         63KB         63KB
[ 3553.519150] p9_req_t                   8KB          8KB
[ 3553.519585] ip6-frags                 15KB         15KB
[ 3553.520016] fib6_nodes                32KB         32KB
[ 3553.520458] ip6_dst_cache             41KB         41KB
[ 3553.520889] PINGv6                    63KB         63KB
[ 3553.521341] RAWv6                    409KB        409KB
[ 3553.521772] UDPLITEv6                 62KB         62KB
[ 3553.522214] UDPv6                     62KB         62KB
[ 3553.522646] tw_sock_TCPv6             15KB         15KB
[ 3553.523081] request_sock_TCPv6         15KB         15KB
[ 3553.523529] TCPv6                     62KB         62KB
[ 3553.523957] nf_conntrack              15KB         15KB
[ 3553.524399] scsi_sense_cache           4KB          4KB
[ 3553.524834] sd_ext_cdb                 3KB          3KB
[ 3553.525289] virtio_scsi_cmd           16KB         16KB
[ 3553.525730] sgpool-128               157KB        178KB
[ 3553.526178] sgpool-64                 63KB         63KB
[ 3553.526609] sgpool-32                113KB        220KB
[ 3553.527043] sgpool-16                 82KB         82KB
[ 3553.527487] sgpool-8                  45KB         45KB
[ 3553.527918] io_kiocb                  74KB         86KB
[ 3553.528365] mqueue_inode_cache         62KB         62KB
[ 3553.528804] nfs_commit_data           15KB         15KB
[ 3553.529249] nfs_write_data            47KB         47KB
[ 3553.529688] jbd2_inode                 7KB          7KB
[ 3553.530139] ext4_system_zone           7KB          7KB
[ 3553.530570] ext4_io_end_vec            7KB          7KB
[ 3553.531002] ext4_bio_post_read_ctx         15KB         15KB
[ 3553.531487] kioctx                    31KB         31KB
[ 3553.531924] aio_kiocb                  7KB          7KB
[ 3553.532369] dnotify_mark               7KB          7KB
[ 3553.532808] dnotify_struct             7KB          7KB
[ 3553.533260] dio                       46KB         46KB
[ 3553.533697] bio-2                      8KB          8KB
[ 3553.534150] fasync_cache               7KB          7KB
[ 3553.534583] pid_namespace              7KB          7KB
[ 3553.535014] posix_timers_cache         15KB         15KB
[ 3553.535477] rpc_buffers               31KB         31KB
[ 3553.535910] rpc_tasks                  3KB          3KB
[ 3553.536361] UNIX                     416KB        416KB
[ 3553.536799] ip4-frags                 15KB         15KB
[ 3553.537249] UDP-Lite                  63KB         63KB
[ 3553.537694] tcp_bind_bucket            8KB          8KB
[ 3553.538148] inet_peer_cache            8KB          8KB
[ 3553.538585] xfrm_state                32KB         32KB
[ 3553.539023] ip_fib_trie                8KB          8KB
[ 3553.539464] ip_fib_alias              19KB         19KB
[ 3553.539902] ip_dst_cache              60KB         60KB
[ 3553.540350] PING                      62KB         62KB
[ 3553.540791] RAW                      125KB        125KB
[ 3553.541246] UDP                      227KB        346KB
[ 3553.541686] tw_sock_TCP               15KB         15KB
[ 3553.542137] request_sock_TCP           7KB          7KB
[ 3553.542573] TCP                       60KB         60KB
[ 3553.543008] hugetlbfs_inode_cache         30KB         30KB
[ 3553.543488] bio-1                     11KB         11KB
[ 3553.543923] eventpoll_pwq             19KB         19KB
[ 3553.544366] eventpoll_epi             47KB         47KB
[ 3553.544803] inotify_inode_mark         97KB         97KB
[ 3553.545260] request_queue             60KB         60KB
[ 3553.545702] blkdev_ioc                48KB         48KB
[ 3553.546150] bio-0                    176KB        176KB
[ 3553.546580] biovec-max              1160KB       1160KB
[ 3553.547016] biovec-64                157KB        236KB
[ 3553.547462] biovec-16                 78KB         78KB
[ 3553.547896] user_namespace            31KB         31KB
[ 3553.548347] uid_cache                  8KB          8KB
[ 3553.548783] dmaengine-unmap-2          4KB          4KB
[ 3553.549233] audit_buffer               7KB          7KB
[ 3553.549679] skbuff_fclone_cache         90KB         90KB
[ 3553.550159] skbuff_head_cache        508KB        656KB
[ 3553.550593] configfs_dir_cache          8KB          8KB
[ 3553.551033] file_lock_cache           59KB         59KB
[ 3553.551481] file_lock_ctx              7KB          7KB
[ 3553.551920] fsnotify_mark_connector         40KB         40KB
[ 3553.552408] net_namespace            161KB        201KB
[ 3553.552848] task_delay_info          113KB        127KB
[ 3553.553310] taskstats                 84KB         84KB
[ 3553.553747] proc_dir_entry           646KB        675KB
[ 3553.554198] pde_opener                55KB         55KB
[ 3553.554628] seq_file                  56KB         56KB
[ 3553.555063] sigqueue                  70KB         70KB
[ 3553.555510] shmem_inode_cache       1214KB       1415KB
[ 3553.555941] kernfs_iattrs_cache        243KB        243KB
[ 3553.556429] kernfs_node_cache       5993KB       6224KB
[ 3553.556864] mnt_cache                127KB        165KB
[ 3553.557335] filp                    1055KB       1477KB
[ 3553.557772] names_cache             6175KB       6396KB
[ 3553.558215] hashtab_node             274KB        274KB
[ 3553.558648] ebitmap_node            1149KB       1149KB
[ 3553.559081] avtab_node              4976KB       4976KB
[ 3553.559526] avc_node                  35KB         35KB
[ 3553.559991] lsm_inode_cache         2532KB       3008KB
[ 3553.560440] lsm_file_cache            92KB        176KB
[ 3553.560876] key_jar                   55KB         55KB
[ 3553.561331] uts_namespace             15KB         15KB
[ 3553.561762] nsproxy                   11KB         11KB
[ 3553.562247] vm_area_struct           830KB       1316KB
[ 3553.562681] fs_cache                  81KB        108KB
[ 3553.563123] files_cache              398KB        398KB
[ 3553.563560] signal_cache             334KB        586KB
[ 3553.563992] sighand_cache            339KB        420KB
[ 3553.564444] task_struct             1023KB       1575KB
[ 3553.564879] cred_jar                  86KB        164KB
[ 3553.565342] anon_vma_chain           198KB        318KB
[ 3553.565779] anon_vma                 168KB        239KB
[ 3553.566229] pid                       75KB        101KB
[ 3553.566665] Acpi-Operand             144KB        178KB
[ 3553.567106] Acpi-ParseExt             27KB         27KB
[ 3553.567542] Acpi-Parse               177KB        193KB
[ 3553.567975] Acpi-State               192KB        208KB
[ 3553.568418] Acpi-Namespace            24KB         24KB
[ 3553.568851] numa_policy                7KB          7KB
[ 3553.569301] trace_event_file         176KB        176KB
[ 3553.569734] ftrace_event_field        280KB        280KB
[ 3553.570191] pool_workqueue            48KB         48KB
[ 3553.570624] task_group                16KB         16KB
[ 3553.571057] mm_struct                343KB        535KB
[ 3553.571510] vmap_area                181KB        181KB
[ 3553.571947] page->ptl                210KB        299KB
[ 3553.572397] kmemleak_scan_area        167KB        167KB
[ 3553.572838] kmemleak_object      1092881KB    1092881KB
[ 3553.573298] kmalloc-8k              4080KB       4512KB
[ 3553.573754] kmalloc-4k              8360KB      10272KB
[ 3553.574221] kmalloc-2k              6116KB       7360KB
[ 3553.574667] kmalloc-1k              2986KB       3424KB
[ 3553.575115] kmalloc-512            38100KB      38100KB
[ 3553.575567] kmalloc-256             1476KB       1656KB
[ 3553.576008] kmalloc-192              644KB        676KB
[ 3553.576467] kmalloc-128              580KB        644KB
[ 3553.576934] kmalloc-96               383KB        976KB
[ 3553.577424] kmalloc-64               936KB       1484KB
[ 3553.577861] kmalloc-32            141496KB     141496KB
[ 3553.578316] kmalloc-16               361KB        396KB
[ 3553.578755] kmalloc-8                296KB        354KB
[ 3553.579206] kmem_cache_node           47KB         47KB
[ 3553.579645] kmem_cache                78KB         78KB
[ 3553.580083] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0
[ 3553.581514] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:40128kB, anon-rss:868kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:108kB oom_score_adj:-250
[ 3553.603164] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3553.603981] CPU: 0 PID: 178 Comm: in:imklog Not tainted 5.10.216 #1
[ 3553.604500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3553.605179] Call Trace:
[ 3553.605411]  dump_stack+0x107/0x167
[ 3553.605715]  dump_header+0x106/0x655
[ 3553.606026]  oom_kill_process.cold+0x10/0x15
[ 3553.606395]  out_of_memory+0x1149/0x1440
[ 3553.606740]  ? oom_killer_disable+0x280/0x280
[ 3553.607122]  ? mutex_trylock+0x237/0x2b0
[ 3553.607458]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3553.607949]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3553.608446]  ? lock_acquire+0xf7/0x470
[ 3553.608777]  ? warn_alloc+0x190/0x190
[ 3553.609117]  __alloc_pages_nodemask+0x51d/0x600
[ 3553.609518]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3553.610017]  ? find_get_entry+0x2c8/0x740
[ 3553.610369]  alloc_pages_current+0x187/0x280
[ 3553.610740]  __page_cache_alloc+0x2d2/0x360
[ 3553.611111]  pagecache_get_page+0x2c7/0xc80
[ 3553.611479]  filemap_fault+0x177d/0x2210
[ 3553.611826]  ? read_cache_page_gfp+0x30/0x30
[ 3553.612199]  ? replace_page_cache_page+0x1200/0x1200
[ 3553.612621]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3553.613073]  ext4_filemap_fault+0x87/0xc0
[ 3553.613424]  __do_fault+0x113/0x410
[ 3553.613736]  handle_mm_fault+0x1e53/0x3500
[ 3553.614091]  ? fsnotify+0xf50/0xf50
[ 3553.614396]  ? find_held_lock+0x2c/0x110
[ 3553.614736]  ? __pmd_alloc+0x5e0/0x5e0
[ 3553.615062]  ? vmacache_find+0x55/0x2a0
[ 3553.615404]  do_user_addr_fault+0x56e/0xc60
[ 3553.615766]  exc_page_fault+0xa2/0x1a0
[ 3553.616089]  ? asm_exc_page_fault+0x8/0x30
[ 3553.616441]  asm_exc_page_fault+0x1e/0x30
[ 3553.616782] RIP: 0033:0x7f2232f7a488
[ 3553.617097] Code: Unable to access opcode bytes at RIP 0x7f2232f7a45e.
[ 3553.617647] RSP: 002b:00007f2232a913e0 EFLAGS: 00010203
[ 3553.618098] RAX: 00007f2232ab25c8 RBX: 00007f2232a9140c RCX: 0000000000000000
[ 3553.618690] RDX: 000000000000005b RSI: 00007f2232a9140c RDI: 00007f2232a91400
[ 3553.619289] RBP: 00007f2232a91d00 R08: 0000000000000000 R09: 00005647726c9e88
[ 3553.619878] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f2232a91400
[ 3553.620466] R13: 00005647726cd4c0 R14: 00007f2232a91d00 R15: 00007f2232a91d7a
[ 3553.621106] Mem-Info:
[ 3553.621334] active_anon:35 inactive_anon:7197 isolated_anon:0
[ 3553.621334]  active_file:0 inactive_file:0 isolated_file:0
[ 3553.621334]  unevictable:0 dirty:0 writeback:0
[ 3553.621334]  slab_reclaimable:6776 slab_unreclaimable:351935
[ 3553.621334]  mapped:8710 shmem:72 pagetables:282 bounce:0
[ 3553.621334]  free:2886 free_pcp:124 free_cma:0
[ 3553.623895] Node 0 active_anon:140kB inactive_anon:28788kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34840kB dirty:0kB writeback:0kB shmem:288kB writeback_tmp:0kB kernel_stack:3552kB all_unreclaimable? yes
[ 3553.625784] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3553.627974] lowmem_reserve[]: 0 1616 1616 1616
[ 3553.628393] Node 0 DMA32 free:5052kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:140kB inactive_anon:28788kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:1128kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB
[ 3553.630764] lowmem_reserve[]: 0 0 0 0
[ 3553.631115] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB
[ 3553.632292] Node 0 DMA32: 1159*4kB (UME) 42*8kB (UM) 3*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5052kB
[ 3553.633453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3553.634180] 99 total pagecache pages
[ 3553.634488] 0 pages in swap cache
[ 3553.634776] Swap cache stats: add 0, delete 0, find 0/0
[ 3553.635225] Free swap  = 0kB
[ 3553.635476] Total swap = 0kB
[ 3553.635726] 524158 pages RAM
[ 3553.635973] 0 pages HighMem/MovableOnly
[ 3553.636316] 105062 pages reserved
[ 3553.636599] Unreclaimable slab info:
[ 3553.636900] Name                      Used          Total
[ 3553.637383] pid_3                      7KB          7KB
[ 3553.637821] pid_2                     79KB         82KB
[ 3553.638274] IEEE-802.15.4-MAC         63KB         63KB
[ 3553.638707] IEEE-802.15.4-RAW         63KB         63KB
[ 3553.639162] p9_req_t                   8KB          8KB
[ 3553.639598] ip6-frags                 15KB         15KB
[ 3553.640037] fib6_nodes                32KB         32KB
[ 3553.640496] ip6_dst_cache             41KB         41KB
[ 3553.640948] PINGv6                    63KB         63KB
[ 3553.641422] RAWv6                    409KB        409KB
[ 3553.641862] UDPLITEv6                 62KB         62KB
[ 3553.642319] UDPv6                     62KB         62KB
[ 3553.642756] tw_sock_TCPv6             15KB         15KB
[ 3553.643206] request_sock_TCPv6         15KB         15KB
[ 3553.643646] TCPv6                     62KB         62KB
[ 3553.644103] nf_conntrack              15KB         15KB
[ 3553.644533] scsi_sense_cache           4KB          4KB
[ 3553.644968] sd_ext_cdb                 3KB          3KB
[ 3553.645427] virtio_scsi_cmd           16KB         16KB
[ 3553.645865] sgpool-128               157KB        178KB
[ 3553.646315] sgpool-64                 63KB         63KB
[ 3553.646750] sgpool-32                113KB        220KB
[ 3553.647200] sgpool-16                 82KB         82KB
[ 3553.647642] sgpool-8                  45KB         45KB
[ 3553.648076] io_kiocb                  74KB         86KB
[ 3553.648533] mqueue_inode_cache         62KB         62KB
[ 3553.648981] nfs_commit_data           15KB         15KB
[ 3553.649444] nfs_write_data            47KB         47KB
[ 3553.649881] jbd2_inode                 7KB          7KB
[ 3553.650335] ext4_system_zone           7KB          7KB
[ 3553.650773] ext4_io_end_vec            7KB          7KB
[ 3553.651226] ext4_bio_post_read_ctx         15KB         15KB
[ 3553.651697] kioctx                    31KB         31KB
[ 3553.652149] aio_kiocb                  7KB          7KB
[ 3553.652583] dnotify_mark               7KB          7KB
[ 3553.653016] dnotify_struct             7KB          7KB
[ 3553.653479] dio                       46KB         46KB
[ 3553.653915] bio-2                      8KB          8KB
[ 3553.654377] fasync_cache               7KB          7KB
[ 3553.654811] pid_namespace              7KB          7KB
[ 3553.655263] posix_timers_cache         15KB         15KB
[ 3553.655707] rpc_buffers               31KB         31KB
[ 3553.656168] rpc_tasks                  3KB          3KB
[ 3553.656606] UNIX                     416KB        416KB
[ 3553.657043] ip4-frags                 15KB         15KB
[ 3553.657517] UDP-Lite                  63KB         63KB
[ 3553.657956] tcp_bind_bucket            8KB          8KB
[ 3553.658411] inet_peer_cache            8KB          8KB
[ 3553.658851] xfrm_state                32KB         32KB
[ 3553.659309] ip_fib_trie                8KB          8KB
[ 3553.659746] ip_fib_alias              19KB         19KB
[ 3553.660200] ip_dst_cache              60KB         60KB
[ 3553.660637] PING                      62KB         62KB
[ 3553.661070] RAW                      125KB        125KB
[ 3553.661534] UDP                      227KB        346KB
[ 3553.661968] tw_sock_TCP               15KB         15KB
[ 3553.662425] request_sock_TCP           7KB          7KB
[ 3553.662860] TCP                       60KB         60KB
[ 3553.663310] hugetlbfs_inode_cache         30KB         30KB
[ 3553.663779] bio-1                     11KB         11KB
[ 3553.664230] eventpoll_pwq             19KB         19KB
[ 3553.664664] eventpoll_epi             47KB         47KB
[ 3553.665119] inotify_inode_mark         97KB         97KB
[ 3553.665571] request_queue             60KB         60KB
[ 3553.666007] blkdev_ioc                48KB         48KB
[ 3553.666462] bio-0                    176KB        176KB
[ 3553.666900] biovec-max              1160KB       1160KB
[ 3553.667358] biovec-64                157KB        236KB
[ 3553.667797] biovec-16                 78KB         78KB
[ 3553.668248] user_namespace            31KB         31KB
[ 3553.668683] uid_cache                  8KB          8KB
[ 3553.669140] dmaengine-unmap-2          4KB          4KB
[ 3553.669583] audit_buffer               7KB          7KB
[ 3553.670019] skbuff_fclone_cache         90KB         90KB
[ 3553.670487] skbuff_head_cache        508KB        656KB
[ 3553.670926] configfs_dir_cache          8KB          8KB
[ 3553.671388] file_lock_cache           59KB         59KB
[ 3553.671823] file_lock_ctx              7KB          7KB
[ 3553.672277] fsnotify_mark_connector         40KB         40KB
[ 3553.672760] net_namespace            161KB        201KB
[ 3553.673216] task_delay_info          113KB        127KB
[ 3553.673663] taskstats                 84KB         84KB
[ 3553.674121] proc_dir_entry           646KB        675KB
[ 3553.674558] pde_opener                55KB         55KB
[ 3553.674998] seq_file                  56KB         56KB
[ 3553.675454] sigqueue                  70KB         70KB
[ 3553.675890] shmem_inode_cache       1214KB       1415KB
[ 3553.676343] kernfs_iattrs_cache        243KB        243KB
[ 3553.676794] kernfs_node_cache       5993KB       6224KB
[ 3553.677245] mnt_cache                127KB        165KB
[ 3553.677695] filp                    1055KB       1477KB
[ 3553.678149] names_cache             6175KB       6396KB
[ 3553.678590] hashtab_node             274KB        274KB
[ 3553.679024] ebitmap_node            1149KB       1149KB
[ 3553.679481] avtab_node              4976KB       4976KB
[ 3553.679919] avc_node                  35KB         35KB
[ 3553.680379] lsm_inode_cache         2532KB       3008KB
[ 3553.680820] lsm_file_cache            92KB        176KB
[ 3553.681281] key_jar                   55KB         55KB
[ 3553.681719] uts_namespace             15KB         15KB
[ 3553.682173] nsproxy                   11KB         11KB
[ 3553.682610] vm_area_struct           830KB       1316KB
[ 3553.683049] fs_cache                  81KB        108KB
[ 3553.683501] files_cache              398KB        398KB
[ 3553.683935] signal_cache             334KB        586KB
[ 3553.684385] sighand_cache            339KB        420KB
[ 3553.684825] task_struct             1023KB       1575KB
[ 3553.685290] cred_jar                  86KB        164KB
[ 3553.685734] anon_vma_chain           198KB        318KB
[ 3553.686187] anon_vma                 168KB        239KB
[ 3553.686629] pid                       75KB        101KB
[ 3553.687066] Acpi-Operand             144KB        178KB
[ 3553.687521] Acpi-ParseExt             27KB         27KB
[ 3553.687974] Acpi-Parse               177KB        193KB
[ 3553.688428] Acpi-State               192KB        208KB
[ 3553.688863] Acpi-Namespace            24KB         24KB
[ 3553.689328] numa_policy                7KB          7KB
[ 3553.689805] trace_event_file         176KB        176KB
[ 3553.690429] ftrace_event_field        280KB        280KB
[ 3553.690875] pool_workqueue            48KB         48KB
[ 3553.691337] task_group                16KB         16KB
[ 3553.691779] mm_struct                343KB        535KB
[ 3553.692236] vmap_area                181KB        181KB
[ 3553.692680] page->ptl                210KB        299KB
[ 3553.693136] kmemleak_scan_area        167KB        167KB
[ 3553.693592] kmemleak_object      1092888KB    1092888KB
[ 3553.694037] kmalloc-8k              4080KB       4512KB
[ 3553.694500] kmalloc-4k              8360KB      10272KB
[ 3553.694947] kmalloc-2k              6116KB       7360KB
[ 3553.695410] kmalloc-1k              2986KB       3424KB
[ 3553.695856] kmalloc-512            38100KB      38100KB
[ 3553.696317] kmalloc-256             1476KB       1656KB
[ 3553.696760] kmalloc-192              644KB        676KB
[ 3553.697220] kmalloc-128              580KB        644KB
[ 3553.697670] kmalloc-96               383KB        976KB
[ 3553.698133] kmalloc-64               936KB       1484KB
[ 3553.698577] kmalloc-32            141496KB     141496KB
[ 3553.699021] kmalloc-16               361KB        396KB
[ 3553.699481] kmalloc-8                296KB        354KB
[ 3553.699926] kmem_cache_node           47KB         47KB
[ 3553.700385] kmem_cache                78KB         78KB
[ 3553.700825] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=178,uid=0
[ 3553.702721] Out of memory (oom_kill_allocating_task): Killed process 176 (rsyslogd) total-vm:220876kB, anon-rss:984kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 3554.088634] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000
[ 3554.089529] CPU: 0 PID: 114 Comm: systemd-udevd Not tainted 5.10.216 #1
[ 3554.090081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3554.090772] Call Trace:
[ 3554.091001]  dump_stack+0x107/0x167
[ 3554.091309]  dump_header+0x106/0x655
[ 3554.091624]  oom_kill_process.cold+0x10/0x15
[ 3554.092002]  out_of_memory+0x358/0x1440
[ 3554.092345]  ? oom_killer_disable+0x280/0x280
[ 3554.092726]  ? mutex_trylock+0x237/0x2b0
[ 3554.093075]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3554.093582]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3554.094097]  ? lock_acquire+0xf7/0x470
[ 3554.094430]  ? warn_alloc+0x190/0x190
[ 3554.094761]  __alloc_pages_nodemask+0x51d/0x600
[ 3554.095166]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3554.095669]  ? find_get_entry+0x2c8/0x740
[ 3554.096023]  alloc_pages_current+0x187/0x280
[ 3554.096396]  __page_cache_alloc+0x2d2/0x360
[ 3554.096762]  pagecache_get_page+0x2c7/0xc80
[ 3554.097129]  filemap_fault+0x177d/0x2210
[ 3554.097488]  ? read_cache_page_gfp+0x30/0x30
[ 3554.097861]  ? handle_mm_fault+0x28b1/0x3500
[ 3554.098235]  ? lock_downgrade+0x6d0/0x6d0
[ 3554.098589]  ext4_filemap_fault+0x87/0xc0
[ 3554.098946]  __do_fault+0x113/0x410
[ 3554.099261]  handle_mm_fault+0x1e53/0x3500
[ 3554.099620]  ? find_held_lock+0x2c/0x110
[ 3554.099975]  ? __pmd_alloc+0x5e0/0x5e0
[ 3554.100310]  ? vmacache_find+0x55/0x2a0
[ 3554.100653]  do_user_addr_fault+0x56e/0xc60
[ 3554.101022]  exc_page_fault+0xa2/0x1a0
[ 3554.101356]  ? asm_exc_page_fault+0x8/0x30
[ 3554.101714]  asm_exc_page_fault+0x1e/0x30
[ 3554.102063] RIP: 0033:0x7f10e5839376
[ 3554.102380] Code: Unable to access opcode bytes at RIP 0x7f10e583934c.
[ 3554.102926] RSP: 002b:00007ffe88de3100 EFLAGS: 00010216
[ 3554.103376] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 00000000000000fa
[ 3554.103978] RDX: 000055fda72eb726 RSI: 000000007ffffff9 RDI: 00007ffe88de3198
[ 3554.104578] RBP: 00007ffe88de3650 R08: 0000000000000100 R09: 000000007fffffff
[ 3554.105176] R10: 00000000ffffffff R11: 0000000000000000 R12: 00007ffe88de3670
[ 3554.105786] R13: 000055fda72eb6f8 R14: 00007ffe88de37f0 R15: 0000000000000032
[ 3554.106484] Mem-Info:
[ 3554.106712] active_anon:35 inactive_anon:6693 isolated_anon:0
[ 3554.106712]  active_file:16 inactive_file:22 isolated_file:32
[ 3554.106712]  unevictable:0 dirty:0 writeback:0
[ 3554.106712]  slab_reclaimable:6776 slab_unreclaimable:352418
[ 3554.106712]  mapped:8794 shmem:72 pagetables:251 bounce:0
[ 3554.106712]  free:2940 free_pcp:20 free_cma:0
[ 3554.109327] Node 0 active_anon:132kB inactive_anon:26752kB active_file:4kB inactive_file:312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35164kB dirty:0kB writeback:0kB shmem:288kB writeback_tmp:0kB kernel_stack:3392kB all_unreclaimable? no
[ 3554.111220] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3554.113417] lowmem_reserve[]: 0 1616 1616 1616
[ 3554.113820] Node 0 DMA32 free:5480kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:132kB inactive_anon:26752kB active_file:0kB inactive_file:800kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3554.116167] lowmem_reserve[]: 0 0 0 0
[ 3554.116511] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB
[ 3554.117677] Node 0 DMA32: 1346*4kB (UM) 65*8kB (UM) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5920kB
[ 3554.118810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3554.119535] 99 total pagecache pages
[ 3554.119847] 0 pages in swap cache
[ 3554.120154] Swap cache stats: add 0, delete 0, find 0/0
[ 3554.120604] Free swap  = 0kB
[ 3554.120859] Total swap = 0kB
[ 3554.121131] 524158 pages RAM
[ 3554.121392] 0 pages HighMem/MovableOnly
[ 3554.121719] 105062 pages reserved
[ 3554.122012] Unreclaimable slab info:
[ 3554.122344] Name                      Used          Total
[ 3554.122815] pid_3                      7KB          7KB
[ 3554.123277] pid_2                     79KB         82KB
[ 3554.123729] IEEE-802.15.4-MAC         63KB         63KB
[ 3554.124199] IEEE-802.15.4-RAW         63KB         63KB
[ 3554.124649] p9_req_t                   8KB          8KB
[ 3554.125124] ip6-frags                 15KB         15KB
[ 3554.125579] fib6_nodes                32KB         32KB
[ 3554.126030] ip6_dst_cache             41KB         41KB
[ 3554.126495] PINGv6                    63KB         63KB
[ 3554.126943] RAWv6                    292KB        409KB
[ 3554.127410] UDPLITEv6                 62KB         62KB
[ 3554.127858] UDPv6                     62KB         62KB
[ 3554.128326] tw_sock_TCPv6             15KB         15KB
[ 3554.128773] request_sock_TCPv6         15KB         15KB
[ 3554.129246] TCPv6                     62KB         62KB
[ 3554.129701] nf_conntrack              15KB         15KB
[ 3554.130173] scsi_sense_cache           4KB          4KB
[ 3554.130625] sd_ext_cdb                 3KB          3KB
[ 3554.131076] virtio_scsi_cmd           16KB         16KB
[ 3554.131547] sgpool-128               157KB        178KB
[ 3554.132000] sgpool-64                 63KB         63KB
[ 3554.132472] sgpool-32                220KB        220KB
[ 3554.132919] sgpool-16                 82KB         82KB
[ 3554.133393] sgpool-8                  45KB         45KB
[ 3554.133839] io_kiocb                  74KB         86KB
[ 3554.134307] mqueue_inode_cache         62KB         62KB
[ 3554.134762] nfs_commit_data           15KB         15KB
[ 3554.135219] nfs_write_data            47KB         47KB
[ 3554.135667] jbd2_inode                 7KB          7KB
[ 3554.136126] ext4_system_zone           7KB          7KB
[ 3554.136574] ext4_io_end_vec            7KB          7KB
[ 3554.137023] ext4_bio_post_read_ctx         15KB         15KB
[ 3554.137527] kioctx                    31KB         31KB
[ 3554.137976] aio_kiocb                  7KB          7KB
[ 3554.138443] dnotify_mark               7KB          7KB
[ 3554.138894] dnotify_struct             7KB          7KB
[ 3554.139363] dio                       46KB         46KB
[ 3554.139814] bio-2                      8KB          8KB
[ 3554.140276] fasync_cache               7KB          7KB
[ 3554.140721] pid_namespace              7KB          7KB
[ 3554.141181] posix_timers_cache         15KB         15KB
[ 3554.141636] rpc_buffers               31KB         31KB
[ 3554.142081] rpc_tasks                  3KB          3KB
[ 3554.142544] UNIX                     416KB        416KB
[ 3554.142988] ip4-frags                 15KB         15KB
[ 3554.143447] UDP-Lite                  63KB         63KB
[ 3554.143894] tcp_bind_bucket            8KB          8KB
[ 3554.144356] inet_peer_cache            8KB          8KB
[ 3554.144803] xfrm_state                32KB         32KB
[ 3554.145274] ip_fib_trie                8KB          8KB
[ 3554.145723] ip_fib_alias              19KB         19KB
[ 3554.146183] ip_dst_cache              60KB         60KB
[ 3554.146626] PING                      62KB         62KB
[ 3554.147070] RAW                      125KB        125KB
[ 3554.147535] UDP                      227KB        346KB
[ 3554.147977] tw_sock_TCP               15KB         15KB
[ 3554.148462] request_sock_TCP           7KB          7KB
[ 3554.148920] TCP                       60KB         60KB
[ 3554.149399] hugetlbfs_inode_cache         30KB         30KB
[ 3554.149878] bio-1                     11KB         11KB
[ 3554.150345] eventpoll_pwq             19KB         19KB
[ 3554.150797] eventpoll_epi             47KB         47KB
[ 3554.151258] inotify_inode_mark         97KB         97KB
[ 3554.151714] request_queue             60KB         60KB
[ 3554.152177] blkdev_ioc                48KB         48KB
[ 3554.152629] bio-0                    228KB        228KB
[ 3554.153082] biovec-max              1160KB       1160KB
[ 3554.153562] biovec-64                252KB        252KB
[ 3554.154014] biovec-16                 78KB         78KB
[ 3554.154482] user_namespace            31KB         31KB
[ 3554.154931] uid_cache                  8KB          8KB
[ 3554.155392] dmaengine-unmap-2          4KB          4KB
[ 3554.155844] audit_buffer               7KB          7KB
[ 3554.156310] skbuff_fclone_cache         90KB         90KB
[ 3554.156768] skbuff_head_cache        508KB        656KB
[ 3554.157235] configfs_dir_cache          8KB          8KB
[ 3554.157702] file_lock_cache           59KB         59KB
[ 3554.158165] file_lock_ctx              7KB          7KB
[ 3554.158612] fsnotify_mark_connector         40KB         40KB
[ 3554.159116] net_namespace            161KB        201KB
[ 3554.159557] task_delay_info          113KB        127KB
[ 3554.160009] taskstats                 84KB         84KB
[ 3554.160479] proc_dir_entry           611KB        648KB
[ 3554.160930] pde_opener                55KB         55KB
[ 3554.161405] seq_file                  56KB         56KB
[ 3554.161852] sigqueue                  70KB         70KB
[ 3554.162319] shmem_inode_cache       1214KB       1415KB
[ 3554.162762] kernfs_iattrs_cache        243KB        243KB
[ 3554.163245] kernfs_node_cache       5993KB       6224KB
[ 3554.163690] mnt_cache                127KB        165KB
[ 3554.164154] filp                    1041KB       1470KB
[ 3554.164606] names_cache             6175KB       6396KB
[ 3554.165050] hashtab_node             274KB        274KB
[ 3554.165524] ebitmap_node            1149KB       1149KB
[ 3554.165974] avtab_node              4976KB       4976KB
[ 3554.166444] avc_node                  35KB         35KB
[ 3554.166899] lsm_inode_cache         2527KB       3004KB
[ 3554.167360] lsm_file_cache            92KB        176KB
[ 3554.167808] key_jar                   55KB         55KB
[ 3554.168272] uts_namespace             15KB         15KB
[ 3554.168721] nsproxy                   11KB         11KB
[ 3554.169191] vm_area_struct           830KB       1316KB
[ 3554.169877] fs_cache                  81KB        108KB
[ 3554.170345] files_cache              398KB        398KB
[ 3554.170962] signal_cache             333KB        586KB
[ 3554.171425] sighand_cache            339KB        420KB
[ 3554.171972] task_struct              990KB       1575KB
[ 3554.172516] cred_jar                  85KB        164KB
[ 3554.172960] anon_vma_chain           198KB        318KB
[ 3554.173473] anon_vma                 161KB        223KB
[ 3554.174073] pid                       75KB        101KB
[ 3554.174541] Acpi-Operand             144KB        178KB
[ 3554.175107] Acpi-ParseExt             27KB         27KB
[ 3554.175595] Acpi-Parse               177KB        193KB
[ 3554.176043] Acpi-State               192KB        208KB
[ 3554.176618] Acpi-Namespace            24KB         24KB
[ 3554.177114] numa_policy                7KB          7KB
[ 3554.177675] trace_event_file         176KB        176KB
[ 3554.178213] ftrace_event_field        280KB        280KB
[ 3554.178664] pool_workqueue            48KB         48KB
[ 3554.179129] task_group                16KB         16KB
[ 3554.179569] mm_struct                343KB        535KB
[ 3554.180008] vmap_area                181KB        181KB
[ 3554.180472] page->ptl                210KB        299KB
[ 3554.180916] kmemleak_scan_area        167KB        167KB
[ 3554.181394] kmemleak_object      1094699KB    1094699KB
[ 3554.181851] kmalloc-8k              3904KB       4352KB
[ 3554.182319] kmalloc-4k              8344KB      10240KB
[ 3554.182772] kmalloc-2k              6028KB       7328KB
[ 3554.183237] kmalloc-1k              2968KB       3424KB
[ 3554.183685] kmalloc-512            38148KB      38148KB
[ 3554.184154] kmalloc-256             1464KB       1656KB
[ 3554.184598] kmalloc-192              643KB        676KB
[ 3554.185049] kmalloc-128              578KB        644KB
[ 3554.185526] kmalloc-96               382KB        976KB
[ 3554.185990] kmalloc-64               852KB       1468KB
[ 3554.186486] kmalloc-32            141776KB     141776KB
[ 3554.187105] kmalloc-16               360KB        396KB
[ 3554.187552] kmalloc-8                296KB        354KB
[ 3554.188129] kmem_cache_node           47KB         47KB
[ 3554.188625] kmem_cache                78KB         78KB
[ 3554.189067] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=19760,uid=0
[ 3554.190700] Out of memory: Killed process 19760 (systemd-udevd) total-vm:25152kB, anon-rss:10180kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0
[ 3554.306452] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000
[ 3554.307350] CPU: 0 PID: 114 Comm: systemd-udevd Not tainted 5.10.216 #1
[ 3554.307905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3554.308601] Call Trace:
[ 3554.308820]  dump_stack+0x107/0x167
[ 3554.309124]  dump_header+0x106/0x655
[ 3554.309446]  oom_kill_process.cold+0x10/0x15
[ 3554.309816]  out_of_memory+0x358/0x1440
[ 3554.310155]  ? oom_killer_disable+0x280/0x280
[ 3554.310537]  ? mutex_trylock+0x237/0x2b0
[ 3554.310877]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3554.311373]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3554.311868]  ? lock_acquire+0xf7/0x470
[ 3554.312203]  ? warn_alloc+0x190/0x190
[ 3554.312535]  __alloc_pages_nodemask+0x51d/0x600
[ 3554.312923]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3554.313441]  ? find_get_entry+0x2c8/0x740
[ 3554.313793]  alloc_pages_current+0x187/0x280
[ 3554.314164]  __page_cache_alloc+0x2d2/0x360
[ 3554.314527]  pagecache_get_page+0x2c7/0xc80
[ 3554.314891]  filemap_fault+0x177d/0x2210
[ 3554.315381]  ? read_cache_page_gfp+0x30/0x30
[ 3554.315749]  ? handle_mm_fault+0x28b1/0x3500
[ 3554.316122]  ? lock_downgrade+0x6d0/0x6d0
[ 3554.316474]  ext4_filemap_fault+0x87/0xc0
[ 3554.316817]  __do_fault+0x113/0x410
[ 3554.317126]  handle_mm_fault+0x1e53/0x3500
[ 3554.317496]  ? find_held_lock+0x2c/0x110
[ 3554.317839]  ? __pmd_alloc+0x5e0/0x5e0
[ 3554.318165]  ? vmacache_find+0x55/0x2a0
[ 3554.318503]  do_user_addr_fault+0x56e/0xc60
[ 3554.318867]  exc_page_fault+0xa2/0x1a0
[ 3554.319194]  ? asm_exc_page_fault+0x8/0x30
[ 3554.319545]  asm_exc_page_fault+0x1e/0x30
[ 3554.319887] RIP: 0033:0x7f10e5839376
[ 3554.320200] Code: Unable to access opcode bytes at RIP 0x7f10e583934c.
[ 3554.320751] RSP: 002b:00007ffe88de3100 EFLAGS: 00010216
[ 3554.321197] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 00000000000000fa
[ 3554.321799] RDX: 000055fda72eb726 RSI: 000000007ffffff9 RDI: 00007ffe88de3198
[ 3554.322388] RBP: 00007ffe88de3650 R08: 0000000000000100 R09: 000000007fffffff
[ 3554.322986] R10: 00000000ffffffff R11: 0000000000000000 R12: 00007ffe88de3670
[ 3554.323582] R13: 000055fda72eb6f8 R14: 00007ffe88de37f0 R15: 0000000000000032
[ 3554.324255] Mem-Info:
[ 3554.324476] active_anon:33 inactive_anon:6604 isolated_anon:0
[ 3554.324476]  active_file:0 inactive_file:34 isolated_file:0
[ 3554.324476]  unevictable:0 dirty:0 writeback:0
[ 3554.324476]  slab_reclaimable:6770 slab_unreclaimable:352573
[ 3554.324476]  mapped:8724 shmem:72 pagetables:243 bounce:0
[ 3554.324476]  free:2979 free_pcp:149 free_cma:0
[ 3554.327051] Node 0 active_anon:132kB inactive_anon:26416kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:0kB writeback:0kB shmem:288kB writeback_tmp:0kB kernel_stack:3360kB all_unreclaimable? no
[ 3554.328916] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3554.331091] lowmem_reserve[]: 0 1616 1616 1616
[ 3554.331499] Node 0 DMA32 free:5432kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:132kB inactive_anon:26752kB active_file:356kB inactive_file:156kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:972kB bounce:0kB free_pcp:688kB local_pcp:132kB free_cma:0kB
[ 3554.333902] lowmem_reserve[]: 0 0 0 0
[ 3554.334259] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB
[ 3554.335403] Node 0 DMA32: 1199*4kB (UM) 52*8kB (UM) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5212kB
[ 3554.336482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3554.337201] 119 total pagecache pages
[ 3554.337532] 0 pages in swap cache
[ 3554.337825] Swap cache stats: add 0, delete 0, find 0/0
[ 3554.338286] Free swap  = 0kB
[ 3554.338540] Total swap = 0kB
[ 3554.338793] 524158 pages RAM
[ 3554.339048] 0 pages HighMem/MovableOnly
[ 3554.339393] 105062 pages reserved
[ 3554.339681] Unreclaimable slab info:
[ 3554.339993] Name                      Used          Total
[ 3554.340468] pid_3                      7KB          7KB
[ 3554.340914] pid_2                     79KB         82KB
[ 3554.341380] IEEE-802.15.4-MAC         63KB         63KB
[ 3554.341830] IEEE-802.15.4-RAW         63KB         63KB
[ 3554.342288] p9_req_t                   8KB          8KB
[ 3554.342739] ip6-frags                 15KB         15KB
[ 3554.343203] fib6_nodes                32KB         32KB
[ 3554.343647] ip6_dst_cache             41KB         41KB
[ 3554.344107] PINGv6                    63KB         63KB
[ 3554.344560] RAWv6                    292KB        409KB
[ 3554.345009] UDPLITEv6                 62KB         62KB
[ 3554.345485] UDPv6                     62KB         62KB
[ 3554.345933] tw_sock_TCPv6             15KB         15KB
[ 3554.346397] request_sock_TCPv6         15KB         15KB
[ 3554.346854] TCPv6                     62KB         62KB
[ 3554.347313] nf_conntrack              15KB         15KB
[ 3554.347756] scsi_sense_cache           4KB          4KB
[ 3554.348215] sd_ext_cdb                 3KB          3KB
[ 3554.348660] virtio_scsi_cmd           16KB         16KB
[ 3554.349129] sgpool-128               157KB        178KB
[ 3554.349576] sgpool-64                 63KB         63KB
[ 3554.350027] sgpool-32                243KB        243KB
[ 3554.350489] sgpool-16                 82KB         82KB
[ 3554.350935] sgpool-8                  45KB         45KB
[ 3554.351397] io_kiocb                  74KB         86KB
[ 3554.351845] mqueue_inode_cache         62KB         62KB
[ 3554.352312] nfs_commit_data           15KB         15KB
[ 3554.352756] nfs_write_data            47KB         47KB
[ 3554.353213] jbd2_inode                 7KB          7KB
[ 3554.353676] ext4_system_zone           7KB          7KB
[ 3554.354143] ext4_io_end_vec            7KB          7KB
[ 3554.354593] ext4_bio_post_read_ctx         15KB         15KB
[ 3554.355076] kioctx                    31KB         31KB
[ 3554.355540] aio_kiocb                  7KB          7KB
[ 3554.355988] dnotify_mark               7KB          7KB
[ 3554.356449] dnotify_struct             7KB          7KB
[ 3554.356901] dio                       46KB         46KB
[ 3554.357369] bio-2                      8KB          8KB
[ 3554.357820] fasync_cache               7KB          7KB
[ 3554.358286] pid_namespace              7KB          7KB
[ 3554.358734] posix_timers_cache         15KB         15KB
[ 3554.359199] rpc_buffers               31KB         31KB
[ 3554.359642] rpc_tasks                  3KB          3KB
[ 3554.360108] UNIX                     416KB        416KB
[ 3554.360560] ip4-frags                 15KB         15KB
[ 3554.361013] UDP-Lite                  63KB         63KB
[ 3554.361477] tcp_bind_bucket            8KB          8KB
[ 3554.361925] inet_peer_cache            8KB          8KB
[ 3554.362391] xfrm_state                32KB         32KB
[ 3554.362837] ip_fib_trie                8KB          8KB
[ 3554.363299] ip_fib_alias              19KB         19KB
[ 3554.363747] ip_dst_cache              60KB         60KB
[ 3554.364211] PING                      62KB         62KB
[ 3554.364661] RAW                      125KB        125KB
[ 3554.365120] UDP                      225KB        346KB
[ 3554.365584] tw_sock_TCP               15KB         15KB
[ 3554.366029] request_sock_TCP           7KB          7KB
[ 3554.366490] TCP                       60KB         60KB
[ 3554.366935] hugetlbfs_inode_cache         30KB         30KB
[ 3554.367422] bio-1                     11KB         11KB
[ 3554.367869] eventpoll_pwq             19KB         19KB
[ 3554.368330] eventpoll_epi             47KB         47KB
[ 3554.368783] inotify_inode_mark         97KB         97KB
[ 3554.369251] request_queue             60KB         60KB
[ 3554.369708] blkdev_ioc                48KB         48KB
[ 3554.370172] bio-0                    236KB        236KB
[ 3554.370621] biovec-max              1160KB       1160KB
[ 3554.371067] biovec-64                286KB        286KB
[ 3554.371528] biovec-16                 78KB         78KB
[ 3554.371973] user_namespace            31KB         31KB
[ 3554.372433] uid_cache                  8KB          8KB
[ 3554.372878] dmaengine-unmap-2          4KB          4KB
[ 3554.373347] audit_buffer               7KB          7KB
[ 3554.373795] skbuff_fclone_cache         90KB         90KB
[ 3554.374270] skbuff_head_cache        508KB        656KB
[ 3554.374722] configfs_dir_cache          8KB          8KB
[ 3554.375189] file_lock_cache           59KB         59KB
[ 3554.375638] file_lock_ctx              7KB          7KB
[ 3554.376100] fsnotify_mark_connector         40KB         40KB
[ 3554.376594] net_namespace            161KB        201KB
[ 3554.377041] task_delay_info          113KB        127KB
[ 3554.377515] taskstats                 84KB         84KB
[ 3554.377961] proc_dir_entry           595KB        637KB
[ 3554.378429] pde_opener                55KB         55KB
[ 3554.378874] seq_file                  56KB         56KB
[ 3554.379337] sigqueue                  70KB         70KB
[ 3554.379783] shmem_inode_cache       1214KB       1415KB
[ 3554.380245] kernfs_iattrs_cache        243KB        243KB
[ 3554.380711] kernfs_node_cache       5991KB       6224KB
[ 3554.381171] mnt_cache                127KB        165KB
[ 3554.381630] filp                    1037KB       1470KB
[ 3554.382096] names_cache             6175KB       6396KB
[ 3554.382542] hashtab_node             274KB        274KB
[ 3554.382990] ebitmap_node            1149KB       1149KB
[ 3554.383453] avtab_node              4976KB       4976KB
[ 3554.383904] avc_node                  35KB         35KB
[ 3554.384369] lsm_inode_cache         2521KB       3004KB
[ 3554.384818] lsm_file_cache            92KB        176KB
[ 3554.385287] key_jar                   55KB         55KB
[ 3554.385736] uts_namespace             15KB         15KB
[ 3554.386198] nsproxy                   11KB         11KB
[ 3554.386650] vm_area_struct           830KB       1316KB
[ 3554.387098] fs_cache                  81KB        108KB
[ 3554.387540] files_cache              398KB        398KB
[ 3554.387979] signal_cache             333KB        586KB
[ 3554.388442] sighand_cache            339KB        420KB
[ 3554.388888] task_struct              990KB       1575KB
[ 3554.389359] cred_jar                  85KB        164KB
[ 3554.389807] anon_vma_chain           198KB        318KB
[ 3554.390273] anon_vma                 156KB        219KB
[ 3554.390720] pid                       75KB        101KB
[ 3554.391180] Acpi-Operand             144KB        178KB
[ 3554.391626] Acpi-ParseExt             27KB         27KB
[ 3554.392076] Acpi-Parse               177KB        193KB
[ 3554.392537] Acpi-State               192KB        208KB
[ 3554.392988] Acpi-Namespace            24KB         24KB
[ 3554.393461] numa_policy                7KB          7KB
[ 3554.393906] trace_event_file         176KB        176KB
[ 3554.394371] ftrace_event_field        280KB        280KB
[ 3554.394826] pool_workqueue            48KB         48KB
[ 3554.395287] task_group                16KB         16KB
[ 3554.395738] mm_struct                343KB        535KB
[ 3554.396197] vmap_area                181KB        181KB
[ 3554.396644] page->ptl                210KB        299KB
[ 3554.397105] kmemleak_scan_area        167KB        167KB
[ 3554.397573] kmemleak_object      1095159KB    1095159KB
[ 3554.398032] kmalloc-8k              3904KB       4352KB
[ 3554.398501] kmalloc-4k              8144KB      10240KB
[ 3554.398955] kmalloc-2k              5828KB       7296KB
[ 3554.399419] kmalloc-1k              2940KB       3424KB
[ 3554.399866] kmalloc-512            38137KB      38164KB
[ 3554.400330] kmalloc-256             1462KB       1656KB
[ 3554.400778] kmalloc-192              630KB        676KB
[ 3554.401243] kmalloc-128              559KB        644KB
[ 3554.401698] kmalloc-96               380KB        972KB
[ 3554.402156] kmalloc-64               843KB       1468KB
[ 3554.402607] kmalloc-32            141880KB     141880KB
[ 3554.403058] kmalloc-16               360KB        396KB
[ 3554.403524] kmalloc-8                296KB        354KB
[ 3554.403978] kmem_cache_node           47KB         47KB
[ 3554.404444] kmem_cache                78KB         78KB
[ 3554.404975] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=19759,uid=0
[ 3554.406869] Out of memory: Killed process 19759 (systemd-udevd) total-vm:25152kB, anon-rss:10180kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0
[ 3554.481882] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3554.484201] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.216 #1
[ 3554.485094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3554.486343] Call Trace:
[ 3554.486746]  dump_stack+0x107/0x167
[ 3554.487295]  dump_header+0x106/0x655
[ 3554.487862]  oom_kill_process.cold+0x10/0x15
[ 3554.488524]  out_of_memory+0x358/0x1440
[ 3554.489129]  ? oom_killer_disable+0x280/0x280
[ 3554.489818]  ? mutex_trylock+0x237/0x2b0
[ 3554.490425]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3554.491306]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3554.492189]  ? lock_acquire+0xf7/0x470
[ 3554.492774]  ? warn_alloc+0x190/0x190
[ 3554.493381]  __alloc_pages_nodemask+0x51d/0x600
[ 3554.494082]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3554.494975]  ? find_get_entry+0x2c8/0x740
[ 3554.495603]  alloc_pages_current+0x187/0x280
[ 3554.496260]  __page_cache_alloc+0x2d2/0x360
[ 3554.496907]  pagecache_get_page+0x2c7/0xc80
[ 3554.497572]  filemap_fault+0x177d/0x2210
[ 3554.498192]  ? read_cache_page_gfp+0x30/0x30
[ 3554.498853]  ? handle_mm_fault+0x28b1/0x3500
[ 3554.499508]  ? lock_downgrade+0x6d0/0x6d0
[ 3554.500138]  ext4_filemap_fault+0x87/0xc0
[ 3554.500760]  __do_fault+0x113/0x410
[ 3554.501321]  handle_mm_fault+0x1e53/0x3500
[ 3554.501958]  ? find_held_lock+0x2c/0x110
[ 3554.502566]  ? __pmd_alloc+0x5e0/0x5e0
[ 3554.503154]  ? vmacache_find+0x55/0x2a0
[ 3554.503761]  do_user_addr_fault+0x56e/0xc60
[ 3554.504411]  exc_page_fault+0xa2/0x1a0
[ 3554.504988]  ? asm_exc_page_fault+0x8/0x30
[ 3554.505629]  asm_exc_page_fault+0x1e/0x30
[ 3554.506241] RIP: 0033:0x7f33449c7c4a
[ 3554.506796] Code: Unable to access opcode bytes at RIP 0x7f33449c7c20.
[ 3554.507763] RSP: 002b:00007ffc5436d1c0 EFLAGS: 00010293
[ 3554.508554] RAX: 0000000000000000 RBX: 000056006feafbf0 RCX: 00000000000001b6
[ 3554.509618] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 000056006ff9d0f0
[ 3554.510672] RBP: 000056006ff9d0f0 R08: 0000000000000008 R09: 0000000000000001
[ 3554.511723] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000080000
[ 3554.512779] R13: 000056006feafbf0 R14: 0000000000000001 R15: 00007ffc5436d570
[ 3554.513886] Mem-Info:
[ 3554.514307] active_anon:33 inactive_anon:6520 isolated_anon:0
[ 3554.514307]  active_file:12 inactive_file:0 isolated_file:0
[ 3554.514307]  unevictable:0 dirty:0 writeback:0
[ 3554.514307]  slab_reclaimable:6770 slab_unreclaimable:352595
[ 3554.514307]  mapped:8703 shmem:72 pagetables:243 bounce:0
[ 3554.514307]  free:2847 free_pcp:338 free_cma:0
[ 3554.518781] Node 0 active_anon:132kB inactive_anon:26080kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34812kB dirty:0kB writeback:0kB shmem:288kB writeback_tmp:0kB kernel_stack:3328kB all_unreclaimable? yes
[ 3554.522013] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3554.525749] lowmem_reserve[]: 0 1616 1616 1616
[ 3554.526479] Node 0 DMA32 free:4904kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:132kB inactive_anon:26248kB active_file:356kB inactive_file:136kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:972kB bounce:0kB free_pcp:1352kB local_pcp:884kB free_cma:0kB
[ 3554.530588] lowmem_reserve[]: 0 0 0 0
[ 3554.531201] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB
[ 3554.533198] Node 0 DMA32: 1136*4kB (UM) 43*8kB (M) 0*16kB 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4920kB
[ 3554.535141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3554.536380] 77 total pagecache pages
[ 3554.536918] 0 pages in swap cache
[ 3554.537462] Swap cache stats: add 0, delete 0, find 0/0
[ 3554.538250] Free swap  = 0kB
[ 3554.538688] Total swap = 0kB
[ 3554.539156] 524158 pages RAM
[ 3554.539593] 0 pages HighMem/MovableOnly
[ 3554.540189] 105062 pages reserved
[ 3554.540687] Unreclaimable slab info:
[ 3554.541252] Name                      Used          Total
[ 3554.542063] pid_3                      7KB          7KB
[ 3554.542859] pid_2                     79KB         82KB
[ 3554.543656] IEEE-802.15.4-MAC         63KB         63KB
[ 3554.544453] IEEE-802.15.4-RAW         63KB         63KB
[ 3554.545250] p9_req_t                   8KB          8KB
[ 3554.546040] ip6-frags                 15KB         15KB
[ 3554.546840] fib6_nodes                32KB         32KB
[ 3554.547639] ip6_dst_cache             41KB         41KB
[ 3554.548447] PINGv6                    63KB         63KB
[ 3554.549245] RAWv6                    292KB        409KB
[ 3554.550029] UDPLITEv6                 62KB         62KB
[ 3554.550841] UDPv6                     62KB         62KB
[ 3554.551654] tw_sock_TCPv6             15KB         15KB
[ 3554.552468] request_sock_TCPv6         15KB         15KB
[ 3554.553307] TCPv6                     62KB         62KB
[ 3554.554133] nf_conntrack              15KB         15KB
[ 3554.554926] scsi_sense_cache           4KB          4KB
[ 3554.555742] sd_ext_cdb                 3KB          3KB
[ 3554.556560] virtio_scsi_cmd           16KB         16KB
[ 3554.557404] sgpool-128               157KB        178KB
[ 3554.558219] sgpool-64                 63KB         63KB
[ 3554.559007] sgpool-32                243KB        243KB
[ 3554.559820] sgpool-16                 82KB         82KB
[ 3554.560635] sgpool-8                  45KB         45KB
[ 3554.561471] io_kiocb                  74KB         86KB
[ 3554.562286] mqueue_inode_cache         62KB         62KB
[ 3554.563090] nfs_commit_data           15KB         15KB
[ 3554.563903] nfs_write_data            47KB         47KB
[ 3554.564719] jbd2_inode                 7KB          7KB
[ 3554.565551] ext4_system_zone           7KB          7KB
[ 3554.566371] ext4_io_end_vec            7KB          7KB
[ 3554.567195] ext4_bio_post_read_ctx         15KB         15KB
[ 3554.568052] kioctx                    31KB         31KB
[ 3554.568872] aio_kiocb                  7KB          7KB
[ 3554.569709] dnotify_mark               7KB          7KB
[ 3554.570533] dnotify_struct             7KB          7KB
[ 3554.571353] dio                       46KB         46KB
[ 3554.572170] bio-2                      8KB          8KB
[ 3554.572962] fasync_cache               7KB          7KB
[ 3554.573790] pid_namespace              7KB          7KB
[ 3554.574603] posix_timers_cache         15KB         15KB
[ 3554.575432] rpc_buffers               31KB         31KB
[ 3554.576252] rpc_tasks                  3KB          3KB
[ 3554.577040] UNIX                     416KB        416KB
[ 3554.577863] ip4-frags                 15KB         15KB
[ 3554.578677] UDP-Lite                  63KB         63KB
[ 3554.579495] tcp_bind_bucket            8KB          8KB
[ 3554.580311] inet_peer_cache            8KB          8KB
[ 3554.581123] xfrm_state                32KB         32KB
[ 3554.581928] ip_fib_trie                8KB          8KB
[ 3554.582742] ip_fib_alias              19KB         19KB
[ 3554.583580] ip_dst_cache              60KB         60KB
[ 3554.584392] PING                      62KB         62KB
[ 3554.585203] RAW                      125KB        125KB
[ 3554.585996] UDP                      225KB        346KB
[ 3554.586801] tw_sock_TCP               15KB         15KB
[ 3554.587613] request_sock_TCP           7KB          7KB
[ 3554.588422] TCP                       60KB         60KB
[ 3554.589236] hugetlbfs_inode_cache         30KB         30KB
[ 3554.590074] bio-1                     11KB         11KB
[ 3554.590887] eventpoll_pwq             19KB         19KB
[ 3554.591700] eventpoll_epi             47KB         47KB
[ 3554.592514] inotify_inode_mark         97KB         97KB
[ 3554.593348] request_queue             60KB         60KB
[ 3554.594156] blkdev_ioc                48KB         48KB
[ 3554.594944] bio-0                    236KB        236KB
[ 3554.595753] biovec-max              1160KB       1160KB
[ 3554.596566] biovec-64                290KB        290KB
[ 3554.597384] biovec-16                 78KB         78KB
[ 3554.598198] user_namespace            31KB         31KB
[ 3554.598980] uid_cache                  8KB          8KB
[ 3554.599790] dmaengine-unmap-2          4KB          4KB
[ 3554.600604] audit_buffer               7KB          7KB
[ 3554.601429] skbuff_fclone_cache         90KB         90KB
[ 3554.602283] skbuff_head_cache        508KB        656KB
[ 3554.603070] configfs_dir_cache          8KB          8KB
[ 3554.603890] file_lock_cache           59KB         59KB
[ 3554.604702] file_lock_ctx              7KB          7KB
[ 3554.605531] fsnotify_mark_connector         40KB         40KB
[ 3554.606417] net_namespace            161KB        201KB
[ 3554.607225] task_delay_info          113KB        127KB
[ 3554.608009] taskstats                 84KB         84KB
[ 3554.608821] proc_dir_entry           595KB        637KB
[ 3554.609638] pde_opener                55KB         55KB
[ 3554.610451] seq_file                  56KB         56KB
[ 3554.611258] sigqueue                  70KB         70KB
[ 3554.612047] shmem_inode_cache       1214KB       1415KB
[ 3554.612853] kernfs_iattrs_cache        243KB        243KB
[ 3554.613721] kernfs_node_cache       5991KB       6224KB
[ 3554.614536] mnt_cache                127KB        165KB
[ 3554.615366] filp                    1037KB       1470KB
[ 3554.616180] names_cache             6175KB       6396KB
[ 3554.616965] hashtab_node             274KB        274KB
[ 3554.617789] ebitmap_node            1149KB       1149KB
[ 3554.618603] avtab_node              4976KB       4976KB
[ 3554.619418] avc_node                  35KB         35KB
[ 3554.620261] lsm_inode_cache         2521KB       3004KB
[ 3554.621050] lsm_file_cache            92KB        176KB
[ 3554.621858] key_jar                   55KB         55KB
[ 3554.622661] uts_namespace             15KB         15KB
[ 3554.623461] nsproxy                   11KB         11KB
[ 3554.624307] vm_area_struct           830KB       1316KB
[ 3554.625087] fs_cache                  81KB        108KB
[ 3554.625894] files_cache              398KB        398KB
[ 3554.626695] signal_cache             333KB        586KB
[ 3554.627501] sighand_cache            339KB        420KB
[ 3554.628303] task_struct              990KB       1575KB
[ 3554.629078] cred_jar                  85KB        164KB
[ 3554.629893] anon_vma_chain           198KB        318KB
[ 3554.630696] anon_vma                 148KB        203KB
[ 3554.631491] pid                       75KB        101KB
[ 3554.632291] Acpi-Operand             144KB        178KB
[ 3554.633064] Acpi-ParseExt             27KB         27KB
[ 3554.633865] Acpi-Parse               177KB        193KB
[ 3554.634669] Acpi-State               192KB        208KB
[ 3554.635469] Acpi-Namespace            24KB         24KB
[ 3554.636269] numa_policy                7KB          7KB
[ 3554.637045] trace_event_file         176KB        176KB
[ 3554.637849] ftrace_event_field        280KB        280KB
[ 3554.638659] pool_workqueue            48KB         48KB
[ 3554.639460] task_group                16KB         16KB
[ 3554.640258] mm_struct                343KB        535KB
[ 3554.641028] vmap_area                181KB        181KB
[ 3554.641838] page->ptl                210KB        299KB
[ 3554.642642] kmemleak_scan_area        167KB        167KB
[ 3554.643457] kmemleak_object      1095242KB    1095242KB
[ 3554.644274] kmalloc-8k              3904KB       4352KB
[ 3554.645076] kmalloc-4k              8144KB      10240KB
[ 3554.645903] kmalloc-2k              5828KB       7296KB
[ 3554.646716] kmalloc-1k              2940KB       3424KB
[ 3554.647519] kmalloc-512            38137KB      38164KB
[ 3554.648332] kmalloc-256             1462KB       1656KB
[ 3554.649141] kmalloc-192              630KB        676KB
[ 3554.649934] kmalloc-128              559KB        644KB
[ 3554.650767] kmalloc-96               380KB        972KB
[ 3554.651640] kmalloc-64               843KB       1468KB
[ 3554.652438] kmalloc-32            141892KB     141892KB
[ 3554.653236] kmalloc-16               360KB        396KB
[ 3554.654023] kmalloc-8                296KB        354KB
[ 3554.654818] kmem_cache_node           47KB         47KB
[ 3554.655620] kmem_cache                78KB         78KB
[ 3554.656416] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=19758,uid=0
[ 3554.658878] Out of memory: Killed process 19758 (systemd-udevd) total-vm:25152kB, anon-rss:10180kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0

VM DIAGNOSIS:
03:11:48  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=000000000000000c RCX=ffffffff8156d0a0 RDX=fffff9400024e87f
RSI=0000000001274300 RDI=0000000000000000 RBP=00000000000000d9 RSP=ffff8880513278e0
R8 =0000000000000001 R9 =ffffea00012743f7 R10=fffff9400024e87e R11=0000000000000001
R12=ffffea0001274300 R13=dffffc0000000000 R14=ffff88800e5346e0 R15=ffffea00012743c0
RIP=ffffffff8140a024 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056006ff54a18 CR3=000000000d2b8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=00000000000d0602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=00000000000000210000656369766564 XMM07=00000000000000000000000000000000
XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880089bf990 RCX=1ffff11001137f01 RDX=1ffff11001137f45
RSI=ffffffff816c4f97 RDI=ffff8880089bf99c RBP=ffff8880089bfa28 RSP=ffff8880089bf8b8
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11001137f08
R12=ffff8880089bf990 R13=0000000000000000 R14=ffff8880089b0000 R15=ffff888015b5d318
RIP=ffffffff81300913 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faca4f5ee70 CR3=0000000004e26000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000000000000055ebf95b3060
XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000
XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000